Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1005 Source: MSExchangeRPC

The Microsoft Exchange RPC service can't be started because the EMSMDB interface is already registered by another process.
After a scheduled reboot the service msexchangeRPC was not started. A manual start do not help. That service use typically the port 6001 See Exchange Network Port Reference TB331973.

Action: Check the Process using "netstat -ano". You will probably see that another process use the port 6001. A reboot should solve the issue. Otherwise you may consider to review in details the service-process using the TCP port 6001 and perform the needed correction.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.