Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1012 Source: MSExchangeCluster

Exchange Information Store Instance <server name>: The RPC call to the service to take the resource offline failed.
We ran into this when trying to move one of the active groups to another node. There appeared to be some problems with a particular drive letter moving over (drive L for our transaction logs). We moved all the other active groups off the node we were having problems moving to. In this case, it was node B. We rebooted node B and then we were able to successfully move all active groups to node B. In brief, a reboot solved the problem.
As per Microsoft: "This event indicates that the RPC call that was made to the named resource failed.
There could be several reasons for this. Review the related events in the application and system logs for clues". See MSEX2K3DB for additional information about this event.
The Microsoft Exchange System Attendant service may not come online on a server that is running Microsoft Exchange Server 2003 in a Microsoft Windows 2000 active/passive cluster. This problem occurs if the RootVer registry value is invalid. See ME906154 to correct this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.