I found something, but it looks like information about operation.
Log Name: Microsoft-Windows-FailoverClustering/Operational
Source: Microsoft-Windows-FailoverClustering
Date: 21. 3. 2014 18:09:40
Event ID: 1201
Task Category: Resource Control Manager
Level: Information
Keywords:
User: SYSTEM
Computer: NameOfServer
Description:
The Cluster service successfully brought the clustered service or application 'MES-SQL-CL' online.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FailoverClustering" Guid="{BAF908EA-3421-4CA9-9B84-6689B8C6F85F}" />
<EventID>1201</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-03-21T17:09:40.906587700Z" />
<EventRecordID>627</EventRecordID>
<Correlation />
<Execution ProcessID="2140" ThreadID="9552" />
<Channel>Microsoft-Windows-FailoverClustering/Operational</Channel>
<Computer> NameOfServer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ResourceGroup">MES-SQL-CL</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-FailoverClustering/Operational
Source: Microsoft-Windows-FailoverClustering
Date: 21. 3. 2014 18:09:41
Event ID: 1201
Task Category: Resource Control Manager
Level: Information
Keywords:
User: SYSTEM
Computer: NameOfServer
Description:
The Cluster service successfully brought the clustered service or application 'SQL Server (MSSQLSERVER)' online.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FailoverClustering" Guid="{BAF908EA-3421-4CA9-9B84-6689B8C6F85F}" />
<EventID>1201</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>3</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-03-21T17:09:41.270688400Z" />
<EventRecordID>628</EventRecordID>
<Correlation />
<Execution ProcessID="2140" ThreadID="8428" />
<Channel>Microsoft-Windows-FailoverClustering/Operational</Channel>
<Computer> NameOfServer</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ResourceGroup">SQL Server (MSSQLSERVER)</Data>
</EventData>
</Event>