Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1011 Source: DhcpServer

Source
Level
Description
The DHCP server issued a NACK to the client <MAC address> for the address <ip> request.
Comments
 
If you have Synoptics hubs on the network, see ME136568 to solve this problem.
I received this error message when I had to switch to a new DHCP server. I found out that the firewall was configured to block certain IP addresses. After modifying the firewall’s settings, the problem was fixed.
See ME163055 if you have a Windows NT 4.0 Service Pack 2 (SP2) DHCP server on the network.
This message is generated when a client had a DHCP assigned IP from a DHCP server and tried to renew it but the address is not availble from the DHCP server receiving the request. Usually this happens when a notebook is moved from a network to another and it is trying to keep the previously  DHCP-assigned IP address.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...