Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 10010 Source: RestartManager

Level
Description
Application "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (pid 3556) cannot be restarted - Application SID does not match Conductor SID..
Comments
 
Application 'C:\Program Files (x86)\iTunes\iTunesHelper.exe' - This event was recorded when iTunes was installed, but the restart of the computer was delayed ("Restart later").
Application: C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\devenv.exe - This event was recorded when an application that was running under debug mode (from Microsoft Visual Studio 2010) tried to perform an update, thus trying to restart Visual Studio instead of the application itself.
T505869 states that the Restart Manager was new to Vista and is what helped allow for updates to software without requiring a reboot. We see this error with software that is trying to update via WU or 3rd party updaters.
Application: C:\Windows\System32\M-AudioTaskBarIcon.exe - In our case, this has been disabled from the Run-at-startup using CCleaner. At the next restart, this event was recorded, most probably it attempted to start but the permissions configured by CCleaner did not allow it.
Application 'C:\Program Files (x86)\Drobo\Drobo Dashboard\DDAssist.exe' (pid 6520) cannot be restarted - 1. - This was recorded in Windows 7, 64bit, after upgrading the Drobo hard disk library management interface to the latest version. Manually restarting the application after this error was successful and no further errors were recorded.


Application 'C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe - This was recorded after an iTunes update. Restarting the computer (as required by iTunes) fixed the problem.
T774743 says that you have to manually restart the application or service that was identified in the event message details. Restart Manager will attempt to resolve the issue the next time it runs.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...