Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 10052 Source: WindowsServerUpdateServices

Level
Description
The server is unable to send e-mail notifications.
Comments
 
When we tested the email notification via the "Test" button, emails were sent. Automated mail notifications could never be sent and resulted in this error. In our case, the problem was caused by insufficient file system access rights to the %TEMP% folder. After granting the NetworkService user read/write access to the %TEMP% folder this problem was solved.
In my case, whenever I clicked on the "Test" button, the sample e-mail worked, but the automatic e-mail never worked. We use McAfee Antivirus software in conjunction with ePO agents in our company. It turns out that the default policy sent to all PCs and servers is to block SMTP traffic (to prevent spam relays). Once I had an exception policy applied via ePO Orchestrator for this particular server which would allow SMTP traffic, then the problem was fixed.
As per Microsoft: "If the network's e-mail server is offline, WSUS 3.0 will silently fail to send e-mail notifications. However, it will write event 10052 (HealthCoreEmailNotificationRed) in the event log". See the links to "Release Notes for Microsoft Windows Server Update Services 3.0" and "Microsoft event 10052 from source Windows Server Update Services" for additional information on this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...