Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1003 Source: Microsoft-Windows-Perflib

The object length of an object returned by Extensible Counter DLL "C:\Windows\system32\wbem\wmiaprpl.dll" for the "WmiApRpl" service was not correct. The sum of the object lengths returned did not match the size of the buffer returned.  The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the count of objects.
As per T775012, there can be several causes for this:

- A non-Microsoft DLL caused the error.
- The list of counters is corrupt.
- The Remote Registry service is not running on a remote system.
- The File and Printer Sharing firewall exception is not enabled on a remote system running Windows Vista.
- The application is running as a user with insufficient privileges.

See the article for suggested troubleshooting.

ME226494 provides details about the nature of this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.