Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: InteractiveServicesdetection

Level
Description
A device or program has requested attention. Device or application: C:\Windows\System32\spoolsv.exe. Message title: \\<servername>\HP Universal Printing PCL 5 (v5.1) (redirected 2),LocalsplOnly Document Properties.
Comments
 
According to T734130, Windows startup availability checks whether the system is able access the boot sector on the system disk. This boot sector, which can be managed either by the BIOS or by the Extensible Firmware Interface (EFI), then loads the rest of the boot blocks. The boot sector loads the Windows Boot Manager, which accesses the Boot Configuration Data store and uses the information to run all of the processes and services required to start the operating system after the computer is switched on. This is a normal condition. No further action is required.
This event is recorded for different applications and it indicates that some sort of input is required from the user by the specified application.

Device or application: c:\Program Files\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe. Message title: Microsoft Visual Studio. - A user reported this message after installing updates for Microsoft Visual Studio. The suggested fix was to uninstall the update.

Device or application: C:\Windows\System32\spoolsv.exe. Message title: \\<servername>\HP Universal Printing PCL 5 (v5.1) (redirected 2), LocalsplOnly Document Properties. - A user reported this as being recorded when users that connect via WAN to a Windows 2008 Terminal Server are trying to print. The TS client printing mapping is attempting to connect to the printer but the printer is not accessible via WAN.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...