Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 26

Source
Appletalk
Level
Error
Description
An invalid AARP packet was received on adapter "<adapter>".
Source
Application Popup
Level
Information
Description
Application popup: 16 bit MS-DOS Subsystem : <path>. <error message>. Choose 'Close' to terminate the application.
Source
Application Popup
Level
Error
Description
Application Popup: System Process - Out of Virtual Memory: Your system is running low on virtual memory. Please close some applications. You can then start the System option in the Control Panel and choose the Virtual Memory button to create an additional paging file or to increase the size of your current paging file.
Source
Application Popup
Level
Information
Description
Application popup: Messenger Service - Message from <source computer> to <destination computer> on <date> <time> <message text>
Source
Application Popup
Level
Error
Description
Application popup: System process-lost delayed write data: the system was attempting to transfer file data from Buffers to <network share>. The write operation failed and only some of the data may have been written to the file
Source
Application Popup
Level
Information
Description
Application popup: <application name> - Application Error : The instruction at "<memory location>" referenced memory at "<memory location>". The memory could not be "written".
Source
Application Popup
Level
Information
Description
Application popup: ASP Script Error : Library not registered.
Source
Application Popup
Level
Information
Description
Application popup: <application or service name> - Unable To Locate DLL : The dynamic link library <dll name> could not be found in the specified path <entire system search path>.
Source
Application Popup
Level
Information
Description
Application popup: Service Control Manager : At least one service or driver failed during system startup. Use Event Viewer to examine the event log for details.
Source
Application Popup
Level
Information
Description
Application popup:<application name> - <message>
Source
Application Popup
Level
Information
Description
Application popup: <application name> - Application Error : The instruction at "<memory location>" referenced memory at "<memory location>". The memory could not be "read".
Source
Application Popup
Level
Error
Description
Application popup: License Warning: License usage for a product licensed in per server mode is nearing the maximum number of licenses purchased. Consult the Application event log or License Manager from the Administrative Tools folder for more information.
Source
Application Popup
Level
Information
Description
lsass.exe - System Error : Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.
Source
Application Popup
Level
Error
Description
Application popup: <application name> - Common Language Runtime Debugging Services : Application has generated an exception that could not be handled.

Process id=<PID in hex> (<PID>) Thread id=<thread in hex> (<thread>).

Click OK to terminate the application.
Click CANCEL to debug the application.
Source
Application Popup
Level
Information
Description
Application popup: Windows - Low On Registry Space : Your maximum registry size is too small. To ensure that Windows runs properly increase your maximum registry size. For more information see Help.
Source
Application Popup
Level
Information
Description
No Disk : Exception Processing Message 0xc0000013 Parameters 0x764C92A0 0x00000004 0x764C92A0 0x764C92A0
Source
Application Popup
Level
Information
Description
Application popup: Windows - License Violation: The system has detected tampering with your registered product type. This is a violation of your software license. Tampering with product type is not permitted.
Source
Application Popup
Level
Information
Description
Application popup: Windows - Delayed Write Failed : Windows was unable to save all the data for the file <file name> The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.
Source
Application Popup
Level
Information
Description
Machine Check: Regs
Source
Application Popup
Level
Information
Description
Microsoft Visual C++ Runtime Library : Runtime Error! Program: D:\Program Files\VERITAS\NetBackup\bin\bpfis.exe
Source
Application Popup
Level
Information
Description
Application popup: userinit.exe - DLL Initialization Failed : The application failed to initialize because the window station is shutting down.
Source
Application Popup
Level
Information
Description
Application popup: Windows - Registry recovery: One of the files containing the system's Registry data had to be recovered by use of a log or alternate copy. The recovery was successful.
Source
Application Popup
Level
Information
Description
Application popup: <application> - Entry Point Not Found : The procedure entry point <function> could not be located in the dynamic link library <dll file>.
Source
Application Popup
Level
Error
Description
Application popup: Explorer.EXE - Application Error : <error description> occurred in the application at location 0x77e678d8.
Source
Atapi
Level
Warning
Description
The driver has detected that device \device\scsiport0 has old or out-of-date firmware. Reduced performance may result.
Source
busmouse
Level
Warning
Description
The description for Event ID ( 26 ) in Source ( busmouse ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: . Data: 0000:
Source
CertSvc
Level
Information
Description
Certificate Services for <example issue> CA was started.
Source
Cpqarray
Level
Warning
Description
The driver has detected that device \Device\Scsi\Cpqarray1 has old or out-of-date firmware. Reduced performance may result.
Source
diskeeper
Level
Information
Description
The diskeeper defragmentation has stoped for drive c:
Source
dmio
Level
Information
Description
Found a bad block on disk Harddisk0 at block number 21828456
Source
E1000
Level
Information
Description
<Intel network adapter name> Link has been established.
Source
hpn
Level
Warning
Description
The driver has detected that device \Device\Scsi\hpn1 has old or out-of-date firmware. Reduced performance may result.
Source
i8042prt
Level
Error
Description
Exceeded the allowable number of retries (configurable via the registry) on device <device path>.
Source
IntelATA
Level
Warning
Description
The driver has detected that device \Device\Scsi\IntelATA1 has old or out-of-date firmware. Reduced performance may result.
Source
ISService
Level
Error
Description
The description for Event ID ( 26 ) in Source ( ISService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
KDC
Level
Error
Description
While processing an AS request for target service <service> the account hostname did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of <value>). The requested etypes were <value>. The accounts available etypes were <values>.
Source
Live Communications Active Directory Connector
Level
Warning
Description
Tried to change an existing user to have a URI of sip:user1@example.com, but the URI is already being used in the database. Use a URI that isn't already taken. The DN of the user whose URI we tried to change is: CN=user3,CN=Users,DC=EXAMPLE,DC=COM. This update came from the naming context: DC=EXAMPLE,DC=COM.
Source
Microsoft-Windows-Kernel-Processor-Power
Level
Information
Description
Processor 0 in group 0 exposes the following:

1 idle state(s)
2 performance state(s)
8 throttle state(s)
Source
Msbusmou
Level
Warning
Description
The description for Event ID (26) in Source (Msbusmou) could not be found. It contains the following insertions string(s):.
Source
Msinport
Level
Warning
Description
The description for Event ID (26) in Source (Msinport) could not be found. It contains the following insertions string(s):.
Source
Mssermou
Level
Warning
Description
The description for Event ID (26) in Source (Mssermou) could not be found. It contains the following insertions string(s):.
Source
N100
Level
Error
Description
N1002 : PROBLEM: Could not establish link.
ACTION: Check network cable.
ACTION: Confirm that the link partner is capable of full duplex, 1000 Mbps operation.
ACTION: Select the NIC in the network control panel. Click properties. Run CPQNTAC diagnostics.
Source
nfrd960
Level
Error
Description
The driver has detected that device \Device\Scsi\nfrd9602 has old or out-of-date firmware. Reduced performance may result.
Source
Offline Files
Level
Error
Description
Errors occurred while encrypting the Offline Files cache. Increase the Offline Files event logging level policy to level 2 or greater to log failure events for individual files.
Source
Outlook
Level
Information
Description
Connection to the Microsoft Exchange Server has been lost. Outlook will restore the connection when possible.
Source
Outlook
Level
Information
Description
Connection to the Microsoft Exchange Server has been restored.
Source
perc2
Level
Warning
Description
The driver has detected that device \Device\Scsi\perc21 has old or out-of-date firmware. Reduced performance may result.
Source
Print
Level
Warning
Description
Failed to publish property printerName at LDAP://SERVERNAME.domain.com/CN=SERVERNAME-PRINTER NAME,CN=SERVERNAME,OU=Domain Controllers,DC=NetBIOSDOMAIN,DC=com. Error: <error code>
Source
Program Popup
Level
Information
Description
Program popup: lsass.exe - System Error : Security Accounts Manager initialization failed because of the following error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
SpntLog
Level
Warning
Description
Outbreak when total viruses found exceed 50 within 1 hours. Top one virus name: "WORM_NETSKY.D"
Source
symmpi
Level
Warning
Description
The driver has detected that device \Device\Scsi\symmpi2 has old or out-of-date firmware. Reduced performance may result.
Source
ultra
Level
Warning
Description
The driver has detected that device \Device\Scsi\Ultra1 has old or out-of-date firmware. Reduced performance may result.
Source
viadsk
Level
Warning
Description
The driver has detected that device \Device\Scsiport1 has old or out-of-date firmware. Reduced performance may result.
Source
VMSMP
Level
Error
Description
NIC driver on '2008R2-Guest' cannot load because it is incompatible with the server virtualization stack. Server version 2 Client version 196610 (VMID 9A5FAAC3-1F7A-442D-9525-46B39ACE22DB).
Source
W32Time
Level
Error
Description
Time Provider NtpClient: The response received from domain controller terminal1.BHDOCS.COM has a bad signature. The response may have been tampered with and will be ignored.
Source
WinMgmt
Level
Error
Description
WinMgmt core is already running. Multiple copies are not supported. This copy will terminate.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...