Event log 1641 which clearly shows if a fail over event has occured.
You will get that event if the node hosting the cluster group is the one that fails. If the other node fails, you will not get that event. The cluster group is for the cluster itself, not for the resource(s) you may have clustered.

Event log 1201 shows that the cluster service was brought online.
In the FailoverClustering/Operational log, there is an Event ID 1201 that says a role was brought online. The only way it would have come online is if it had failed, was taken offline, or was moved to another node.

Thanks,
WintelAdmin