Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 10 Source: Print

Document <document number>, <application> - <document name> owned by <user name> was printed on <printer name> via port <port name>. Size in bytes: <size>; pages printed: <no of pages>
Indicates a successul printing. To disable this type of messages follow these steps:
- On the server open the Printers folder.
- In the File menu you will find "Server Properties".
- Use the Advanced tab to configure the logging level.
You have to restart the server for the changes to take effect. Just restarting the Spooler service is not enough.

If the number of pages is listed as 0 (with 0 bytes) then see ME232230 and ME319198.

If the job is listed as being owned by ANONYMOUS LOGON, then see ME323909. There is a fix available for this.
This event can occur if you redirect LPT1 using the "Net Use" command to use the shared network printer connected to the local computer, then print to it. See ME137065 for a workaround on this issue.

See MSW2KDB for additional information about this event.
I have a windows 2000 server on sp3 which had a network shared hp deskjet 930c via usb connection. The event was caused by the usb connection. I connected the printer via serial cable and the problem was solved.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.