Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 11 Source: atapi

The driver detected a controller error on \Device\Ide\IdePort0.
I recieved this event on a Windows Vista SP1 machine shortly after logon. Never saw the problem in safe mode. I disabled all services and startup items and still had the computer locking up randomly after login. Never could get the issue to happen in safe mode. It turns out that the HD had a bad sector which happened to be holding the pagefile! Simply performed a scandisk to get the machine operational, performed a backup and then replaced the HD.
In one case, a computer was running Windows 2000 Professional SP4 that was configured to boot from a SCSI drive. An IDE drive was temporarily added in order to perform some work on it. When the computer was started this event was repeated four times and then followed by EventID 9 from source atapi. Windows showed the disk as normal but Partition Magic 8.0 showed it as "BAD". Remove or replace the faulty hard drive.
This error may be received if you have 2 cd-roms on the same ide channel with incorrect jumper settings.  In my scenario, the cd-rom jumpers were set to cable select however the IDE cable did not support it.  Configuring the jumpers to master/slave corrected this error.
See also event ID 11 from adpu160m for a more general explanation.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.