-- File Server System events for File Server 1 *[System[Provider[@Name='DataScrn']]] *[System[Provider[@Name='Quota']]] *[System[Provider[@Name='SrmSvc']]] *[System[Provider[@Name='SrmReports']]] *[System[Provider[@Name='Microsoft-Windows-DfsSvc']]] *[System[Provider[@Name='DFS Replication']]] *[System[Provider[@Name='DFSR']]] *[System[Provider[@Name='File Replication Service']]] *[System[Provider[@Name='NtFrs']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]] *[System[Provider[@Name='NfsSvc']]] *[System[Provider[@Name='SIS']]] *[System[Provider[@Name='Groveler']]] *[System[Provider[@Name='Ci']]] *[System[Provider[@Name='Microsoft-Windows-Search']]] *[System[Provider[@Name='Microsoft-Windows-Search-ProfileNotify']]] *[System[Provider[@Name='partmgr']]] *[System[Provider[@Name='volmgr']]] *[System[Provider[@Name='Virtual Disk Service']]] *[System[Provider[@Name='VDS Basic Provider 1.0']]] *[System[Provider[@Name='VDS Dynamic Provider 2.0']]] *[System[Provider[@Name='Volsnap']]] *[System[Provider[@Name='VSS']]] *[System[Provider[@Name='Ntfs']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]] *[System[Provider[@Name='mrxsmb']]] *[System[Provider[@Name='Srv']]] *[System[Provider[@Name='Srv2']]] *[System[Provider[@Name='Workstation']]] *[System[Provider[@Name='Server']]] *[System[Provider[@Name='Microsoft-Windows-Defrag']]] *[System[Provider[@Name='Chkdsk']]] *[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]] *[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]] *[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]] *[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]] *[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]] *[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]] *[System[Provider[@Name='Microsoft-Windows-SyncShare']]] --