Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 100 Source: ESENT

<service> (892) The database engine 6.00.3940.0004 started.
This behavior can occur if the WINS database is damaged or is missing from the "%SystemRoot%\system32\wins" folder. See ME225346 for more details.
ESENT is the service that manages the Jet database engine used by several applications (WINS, DHCP, etc...).

lserver -  The Windows Terminal Services License logging service. You can either disable this service (unless of course, you use it to track WTS licenses on your domain) or locate the database used by lserver and configure your backup software not to perform backup of those files.

ntfrs - The File Replication Service - no additional info
I think that is interesting to know how many services are based on the Extensible Storage Engine:

Active Directory (NTDS)
File Replication service (FRS)
Windows Internet Name service (WINS)
Security Configuration Engine (SCE)
Certificate Server
Terminal Services Session folder
Terminal Services Licensing service
Catalog database
Help and Support Services
Directory Synchronization service (MSDSS)
Remote Storage (RSS)
Phone Book service
Single Instance Store (SIS) Groveler
Windows NT Backup/Restore
Exchange store
Microsoft Exchange folder (SRS and DXA)
Key Management service (KMS)
Instant Messaging
Content Indexing

These as per ME318116. Expect more to come from Microsoft :-)

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.