Log Name:      System
Source:        Disk
Date:          30/10/2022 13:30:04
Event ID:      51
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      DC0.domain.local
Description:
An error was detected on device \Device\Harddisk1\DR1 during a paging operation.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Disk" />
    <EventID Qualifiers="32772">51</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2022-10-30T13:30:04.923878100Z" />
    <EventRecordID>485824</EventRecordID>
    <Channel>System</Channel>
    <Computer>DC0.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\Harddisk1\DR1</Data>
    <Binary>030080000100000000000000330004802D0100000E0000C0000000000000000000000000000000008191000000000000FFFFFFFF010000005800000802000001FD20101242032040000200003C000000A0590CD20D8BFFFF78F6DFD90D8BFFFF000000000000000010DC7EDA0D8BFFFF0000000000000000008000000000000088000000000000008000000000010000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          30/10/2022 13:30:25
Event ID:      3
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      DC0.domain.local
Description:
Filter Manager failed to attach to volume '\Device\HarddiskVolume16'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
    <EventID>3</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2022-10-30T13:30:25.552933100Z" />
    <EventRecordID>485826</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="420" />
    <Channel>System</Channel>
    <Computer>DC0.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0xc03a001c</Data>
    <Data Name="ExtraStringLength">24</Data>
    <Data Name="ExtraString">\Device\HarddiskVolume16</Data>
  </EventData>
</Event>

Log Name:      Application
Source:        ESENT
Date:          30/10/2022 13:24:28
Event ID:      413
Task Category: Logging/Recovery
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      DC0.domain.local
Description:
svchost (3020,R,98) SoftwareUsageMetrics-Api: Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">413</EventID>
    <Level>2</Level>
    <Task>3</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2022-10-30T13:24:28.314169100Z" />
    <EventRecordID>87934</EventRecordID>
    <Channel>Application</Channel>
    <Computer>DC0.domain.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>svchost</Data>
    <Data>3020,R,98</Data>
    <Data>SoftwareUsageMetrics-Api: </Data>
    <Data>-1032</Data>
  </EventData>
</Event>