Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1106 Source: FoundationAgents

Level
Description
Compaq Foundation Agent: The Compaq Management Agents have detected a process exception: PID: <process id> - DESC: <process description>
Comments
 
Process: lsass.exe - The server was hanging. When trying to log on after this the Domain dropdown list is not available. Local logon is not possible because server is unresponsive. There were about 20 account deleted profiles under user profiles. These totalled about 108MB and after we deleted them the server did not hung anymore.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...