[PVE-User] Trouble with Win2016 server...

[Marco Gaiarin]

Mandi! Gianni Milo
  In chel di` si favelave...

> Can you please post the VM config file ?

Sure!

 agent: 1
 boot: dcn
 bootdisk: scsi1
 cores: 2
 ide0: none,media=cdrom
 memory: 8192
 name: vwssv2
 net0: virtio=E6:DE:2C:88:BB:4D,bridge=vmbr0,firewall=1
 numa: 0
 ostype: win10
 scsi1: VM1:vm-100-disk-0,discard=on,size=100G
 scsihw: virtio-scsi-pci
 smbios1: uuid=6582aaa8-761a-4013-90fb-7b6667719d70
 sockets: 1
 unused0: DATA2:vm-100-disk-0
 vmgenid: 784ef60a-b5ee-40c1-a5aa-7bcadb0091f4


> Also, which type of storage are you using for storing the VM disk(s)?

On, working, 4.4: ceph.
On, troubled, 5.4: iSCSI/LVM


> Sounds strange that the event log security database gets corrupted, perhaps
> RAM or disk issues?

The machine spotted an id '41' 'Kernel-Power' event, and a:

 Nome registro: System
 Origine:       Microsoft-Windows-WER-SystemErrorReporting
 Data:          19/06/2019 14:34:40
 ID evento:     1001
 Categoria attività:Nessuna
 Livello:       Errore
 Parole chiave: Classico
 Utente:        N/D
 Computer:      VWSSV2
 Descrizione:
 Il computer è stato riavviato da un controllo errori. Controllo errori: 0x0000001a (0x000000000000003f, 0x000000000000421f, 0x0000000078ac0f51, 0x000000000000421f). I dettagli sono stati salvati in: C:\Windows\MEMORY.DMP. ID segnalazione: 00000000-0000-0000-0000-000000000000.
 XML evento:
 <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2019-06-19T12:34:40.315851200Z" />
    <EventRecordID>3080</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>VWSSV2</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="param1">0x0000001a (0x000000000000003f, 0x000000000000421f, 0x0000000078ac0f51, 0x000000000000421f)</Data>
    <Data Name="param2">C:\Windows\MEMORY.DMP</Data>
    <Data Name="param3">00000000-0000-0000-0000-000000000000</Data>
  </EventData>
 </Event>


> Have you tried switching to IDE disk mode temporarily and see if the issue
> is reproducible there as well ?

No.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)