Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1002 Source: Microsoft-Windows-Dhcp-Client

Level
Description
The IP address lease 192.168.1.110 for the Network Card with network address 001D9213C515 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
Comments
 
This message indicates that the DCHP client service on this computer tried to renew its IP address but the DHCP server refused to extend it. For example, the DHCP scope might've changed so the IP address is not usable anymore.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...