Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1016 Source: MSExchangeActiveSync

Level
Description
Exchange ActiveSync has encountered repeated failures when it tries to access data on Mailbox server [SERVER.comp.local]. It will temporarily stop making requests to the Mailbox server for [60] seconds to reduce load on that server. This delay may occur if the Mailbox server is overloaded. If this event is logged frequently review the Application log on this server and the Mailbox server noted above for other events that could indicate the root cause of performance problems.
Comments
 
This event indicates that repeated failures occurred when Exchange ActiveSync tried to access data on the computer that is running the Mailbox server role. If this event happens frequently, TB218774 recommends decreasing the load on the mailbox server specified in the event description or looking for other events that could indicate the root cause of performance problems on the mailbox server.
A support forum suggested the restart of the Exchange servers. In many cases the error will be gone after the servers come up.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...