Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1006 Source: MSExchangeDiagnostics

The performance counter '\\VSS2\LogicalDisk(HarddiskVolume1)\Free Megabytes' sustained a value of '87.00', for the '15' minute(s) interval starting at '12/14/2013 9:22:00 PM'. Additional information: None. Trigger Name:DatabaseDriveSpaceTrigger. Instance:harddiskvolume1
From a support forum: "I recommend you disable the trigger in the Microsoft.Exchange.Diagnostics.Service.exe to check the result.

You can find it in the following location:

C:\Program Files\Microsoft\ExchangeServer\V15\Bin\Microsoft.Exchange.Diagnostics.Service.exe (it's a config file)

Change "ExchangeJobs.Triggers.DatabaseDriveSpaceTrigger" from "True" to "False"."
From a support forum: "One of the known issues with Exchange 2013. Have you installed Exchange 2013 CU2 on 2012 R2 though? Just to let you know installation of Exchange 2013 CU2 on Windows Server 2012 R2 is still unsupported. From what I know, support will be added with Exchange SP1. Here is a great article on how to disable this checking: EV100471 (The case of the erroneous disk space checker)"
From a support forum: "I recommend you refer to the Orbdot's suggestion to disable the databasedrivespacetrigger under comments in the following blog to check the result: EV100472 (Released: Exchange Server 2013 RTM Cumulative Update 2)"

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.