Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1002 Source: ApplicationHang

The program <program name> version <version number> stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: <process ID> Start Time: <time> Termination Time: <time>.
Program Wow-64.exe version - From a support forum: " I upgraded my Nvidia drivers to GeForce 320.18 (released 23 May 2013) and the error is gone."
Program: iTunes.exe - We got this message when trying to synchronize the iPhone with iTunes while the Bonjour service was disabled. iTunes hang and we had to use Task Manager to kill the process. After starting the Bonjour service, the synch worked fine. A corresponding event id 1001 from Windows Error Reporting was also recorded (about iTunes crashing).
Program: iexplore.exe version 7.0.6001.18000 - From a support forum: "On Windows Vista, this problem was caused by an Internet Explorer add-on from Once I disabled it, the problem was gone."

Program: Explorer.EXE version 6.0.6001.18164 - According to one user, this was caused by RoboForm, a password manager software. The culprit was detected using Trend Micro HijackThis debugging logger (see EV100058).

Program: PhotoScreensaver.scr version 6.1.7600.16385 - From a Microsoft support engineer: "This can happen if you have videos in the folder you are using for the Pictures screensaver. Remove any videos from the folder to see if that solves the problem."

Program: MediaShout 3.exe version - Caused by a removal of some of the files used by MediaShout.

Program: explorer.exe version 6.1.7100.0 - On Windows 7, it was caused by the AVG antivirus software (once disabled, the problems were gone).
I was experience this event 1002 with an application. If I started the application immediately after startup, it was ok, but if I tried to start the application after some time (after running IE or something using .NET) then the application would not start. Immediately after I disabled the .NET optimization service, my application started fine.
This problem is related to issues with Server Message Block (SMB) 2.0 when SMB 2.0 is running on a Windows Vista-based computer. See ME935370 for details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.