Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1052 Source: ClusterServiceClussvc

Level
Description
Cluster network name resource <resource name> could not be brought online because the name could not be added to the system.
Comments
 
This can also occur if there is an existing computer object using the name of the cluster.
As per Microsoft: "This error message indicates that a duplicate NetBIOS name was detected on the network for the resource. Event ID 1052 is typically caused by improper Windows Internet Naming Service (WINS) settings, corrupted WINS databases, or other network-related issues. If Service Pack 3 for Windows 2000 was just applied to the cluster nodes in a Windows 2000 domain or you have turned off kerberos support for a network name resource, there may be an existing computer object in your active directory". See ME257903 to fix this problem.

See the link to "EventID 1052 from source Clussvc" for additional information.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...