Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1097 Source: MSExchangeDS

Source
Level
Description
During Intersite Replication, the directory Replication Agent (DRA) received an invalid update message for naming context. /o=RGM/ou=PECTECH Kerinci/cn=Configuation from the directory at EX:/o=RGM/ou=Kerinci/cn=configuation/cn=Servers/cn=KERRAPP01/cn=microsoft DSA. This Directory is not authorized to replicate that naming context to that directory.
Comments
 
From a newsgroup group: "The foreign directory is not in the Reps-to-Ext list on the named naming context. All requests from that directory will be ignored.

Run the knowledge consistency checker on the local and foreign bridgehead servers. Verify that there are no inconsistencies in the replication connectors. Examples include moving a bridgehead or deleting a replication connector between the two directories.

The Knowledge constistency checker can be found on the General page of the Directory Service on each server".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...