Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: PerfDisk

Unable to open the Disk performance object. Status code returned is data DWORD 0.
If you disable the Windows Management Instrumentation Driver you get a similar error. So instead of disabling it, set it to manual.
This usually means that performance counters have been enabled, but not configured. If you don't plan to use performance counters, don't run the service "Performance Counters and Alerts".
Windows 2000 runs performance counters in the background, including disk, system and network performance. Perfmon will post errors to the event log if a service is disabled or damaged.  If you get any error messages relating to any of the performance counters such as perfmon, perfnet, perfdisk, perfctrs (including the common error: Unable to read IO control information from NBT device), and commonly W3Ctrs, FtpCtrs, and IISInfoCtrs if IIS is disabled.
You can manually disable individual monitors using the Windows 2000 Resource Kit utility exctrlst.exe. Extensible Counter List allows you to disable individual performance counters by deselecting the "Enabled" box.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.