Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 29

Source
diskeeper
Level
Information
Description
File System Inconsistency detected. The file records the GetInUseFRS requested and received are 36451, 36450
Source
dmio
Level
Information
Description
dmio: Harddisk9 read error at block <block>: status <status code>.
Source
KDC
Level
Warning
Description
The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
Source
Live Communications Active Directory Connector
Level
Error
Description
Encountered an unknown failure while attempting to process a user entry. The entry came from naming context DC=contoso,DC=com. This error has caused the replication cycle to fail. It will be retried.
Diagnostic information: User DN attribute value: CN=Guest,CN=Users,DC=contoso,DC=com Guid Active Directory attribute name: objectGUID Guid Active Directory attribute value: {A5E68767-26D9-4843-9B07-FDE285F87996} The error occurred while processing attribute isDeleted. The description of the error that occurred is: Decoding Error (hr=0x8007003b).
Source
Microsoft-Windows-Kerberos-Key-Distribution-Center
Level
Warning
Description
The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
Source
Microsoft-Windows-WindowsUpdateClient
Level
Error
Description
Windows Update lost connectivity.
Source
N100
Level
Error
Description
Adapter compaq NC3134 Fast Ethernet NIC: Hardware failure detected.
Source
NetscapeProxy
Level
Error
Description
Proxy Server: <server name> Restarting proxy: reason - 2
Source
NNTPSVC
Level
Warning
Description
The virtual server 1 tried to connect to server <news server name>.microsoft.com and failed.
Source
Outlook
Level
Information
Description
The Store c:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Outlook\outlook.ost is being re-pushed to the indexer for the following reason: Newly created store.
Source
Print
Level
Error
Description
Failed to delete PrintQueue CN=DMR-PS002-DMR-PRCO0012 at <print server>/CN=DMR-PS002,OU=Computers,OU=DMR,DC=exec,DC=ds,DC=state,DC=ct,DC=us. Error <error code>.
Source
serial
Level
Error
Description
The control registers for com1 overlaps with the com2 control registers
Source
TermServLicensing
Level
Error
Description
Terminal Services Licensing can only be run on Domain Controllers or Server in a Workgroup. See Terminal Server Licensing help topic for more information.
Source
tsmlvsa
Level
Error
Description
Encountered exception [C000000D] during copy-on-write operation.
Source
VolSnap
Level
Error
Description
The shadow copies of volume C: were aborted during detection.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 58 00   ......X.
0008: 00 00 00 00 1d 00 06 c0   .......À
0010: 03 00 00 00 0d 00 00 c0   .......À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
Source
vxio
Level
Error
Description
vxio: Harddisk<value> read error at block <value>: status <error code>.
Source
W32Time
Level
Error
Description
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible.No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.
Source
WinMgmt
Level
Error
Description
The repository file was not the size we expected it to be. This could have been because WinMgmt crashed the system crashed or you did not shut your machine down cleanly. We had to delete the repository and create a new one.
Source
WLBS
Level
Information
Description
WLBS : host X converged as DEFAULT host with host(s) A,B,C as part of the cluster.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...