Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1038 Source: MSExchangeFB

Unable to access the Microsoft Schedule+ Free/Busy Information folder. Ensure that the (hidden) Microsoft Schedule+ Free/Busy Information folder exists. Open the Recipients container and select View.HiddenRecipients.
The Microsoft Schedule+ Free/Busy Connector may cause an exception error when processing a message containing Free/Busy data from another server that contains multiple users, and the users are not in the directory service. The users existed at one time and were deleted. The tombstone on the information has not yet expired, causing the last update of Free/Busy data to be sent. For more information, see ME158151.
You can also receive this error if the connection to the Domain Controller that is servicing the Exchange server goes down. Restoring the connection resolves the errors.
As per Microsoft: "This error (along with the one generated by event 1047) can be caused by having the default role on the hidden Schedule+ Free Busy information folder set to something other then Editor. To eliminate these errors, change the default role to Editor." See ME155916 for details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.