Read a Health Service fault as a possible root-cause summary

Source facts

The Health Service monitors a Storage Spaces Direct cluster and produces faults for detected problems. It can combine effects that share an underlying cause. Microsoft’s example reports a failed server as the root fault rather than separately reporting every drive whose connectivity was lost with that server. The documented fault query returns nothing when no faults are present. Microsoft documentation.

Applicability

Use this review when triaging a Health Service fault list. Identify the cluster, observation time, reported entity, and affected workload. Distinguish a consolidated report from an inventory of every component affected by the event.

DSE recommendation

Start with the reported cause and build a short impact map for the dependent resources. Correlate the fault with the corresponding node or hardware observations before opening separate incidents for each consequence. Assign an owner to the underlying problem and preserve the original fault details. Keep workload recovery evidence separate from disappearance of the initial fault.

Verification

After an approved correction, query faults again and compare the affected resource state with the original impact map. Test the selected workload operation and record any remaining dependent failure. If the fault list is empty, retain that observation with its timestamp rather than treating it as proof of every application’s health. Escalate discrepancies to the appropriate layer owner.

Official references

Microsoft Learn: Health Service faults. Source reviewed September 8, 2026.