Hi Youssef Kassem,
Thanks for your update. Based on my research, Event ID 5120 indicates that there has been an interruption to communication between a cluster node and a volume in Cluster Shared Volumes (CSV). This interruption may be short enough that it isn't noticeable or long enough that it interferes with services and applications using the volume. If the interruption persists, review other events in the System or Application event logs for information about communication between the node and the volume.
Status code: STATUS_IO_TIMEOUT(c00000b5), indicates that a redirected file system IO operation took longer than the time allowed. The timeout is two minutes for synchronous operations and four minutes for asynchronous operations.
The cause of the timeout varies. It might indicate a software, configuration, or hardware problem.
- Check your system event log for events that indicate network connectivity problems, host bus adapter (HBA) problems, or disk problems.
- Make sure that the affected system has the latest versions of network and storage drivers and firmware installed. Additionally, make sure that Microsoft updates and hotfixes are up to date. In particular, make sure that October 18, 2018—KB4462928 (OS Build 14393.2580) is installed. This update addresses an issue that occurs when restarting a node after draining the node. Event ID 5120 appears in the log with a "STATUS_IO_TIMEOUT c00000b5" message. This may slow or stop input and output (I/O) to the VMs, and sometimes the nodes may drop out of cluster membership.
Reference: Event ID 5120 Cluster Shared Volume troubleshooting guidance - Windows Server | Microsoft Learn
Best Regards,
Ian Xue
If the Answer is helpful, please click "Accept Answer" and upvote it.