Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: vmauthd

The description for Event ID 1000 from source vmauthd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

2012-01-14T20:05:33.197+05:00| vthread-6| I120: Service Started.

the message resource is present but the message is not found in the string/message table
This event can be recorded in various conditions. The last part of event description is in fact the relevant information (the information after "The following information was included with the event").


2012-01-20T07:58:27.786-06:00| vthread-4| W110: TicketLimitFileAccess: Successfully added access-allowed ACE to file's DACL

This indicates that the VMWare Authentication Service updated a file's access control list with an ACE (access control entry - contains set of permissions and a SID that identifies a user)

* * *

2012-01-14T20:05:33.197+05:00| vthread-6| I120: Service Started.

Simply records the fact that the VMWare service has started

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.