Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1101 Source: NTDSReplication

Level
Description
The directory replication agent (DRA) was able to successfully apply the changes to object <object> (<GUID>) after backing out one or more of the attribute changes. Preceding messages will indicate which attributes were reversed. Please note that this will have the effect of nullifying the change where it was made, causing the original update not to take effect. The originator should be notified that their change was not accepted by the system.
Comments
 
See ME184244 and ME195918 for a situation in which this event can occur. Also see the link to "EventID 1101 from source Active Directory" for additional information about this event.
As per Microsoft: "This problem occurs because Active Directory has a limitation of approximately 800 values that can be associated with a single object. To resolve this problem, obtain the latest service pack for Windows 2000". See ME267855 for more details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...