Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1012 Source: DhcpServer

Source
Level
Description
The DHCP Client (000A12AC010010A4D07EB2) declined the address (172.18.10.189).
Comments
 
As per Microsoft: "Internet Protocol (IP) addresses are leased by the Dynamic Host Configuration Protocol (DHCP) server to its clients. Each lease has an expiration date, which the client must renew if it is going to continue to use that IP address. The DHCP server cannot issue leases to clients if the number of available IP addresses in the scope is insufficient". See the link to "TechNet Event ID 1012 - DHCP Lease Availability" for more details.
This message means that the DHCP server has received a DHCP request, offered an IP address to the client but the client declined it (this could be because the client has received already an IP address from another DHCP server).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...