Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1011 Source: SBCore

Source
Level
Description
Multiple domain controllers running Windows Server 2003 for Small Business Server have been detected in your domain. To prevent this computer from shutting down in the future, you must remove all but one of these from the domain.
Comments
 
As per Microsoft: "In a Windows Small Business Server 2003 domain, only one computer can run Windows Small Business Server unless you are in the process of migrating from an earlier version of Small Business Server. If you are migrating, you have 7 days to complete the migration and remove the earlier version of Small Business Server.

This caveat does not apply to domain controllers that are running Microsoft Windows Server 2000 or Windows Server 2003 operating systems". See MSW2KDB and "EventID 1012 from source SBCore" for additional information.

From a newsgroup post: "I had a case like this one. If you do not have another DC, restarting the SBS will fix the problem. If not, run ntdsutil to verify that the SBS holds all the FSMO roles".
See ME925652 for information about this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...