Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 116 Source: W3SVC

The service metabase path "/LM/W3SVC/" could not be opened. The data is the error code.
See ME889073 for a hotfix applicable to Microsoft Windows XP SP2.

As per Microsoft: "This problem may occur when the MachineGUID registry key is under stress. When the MachineGUID registry key is under stress, a condition may occur where the value of the MachineGUID registry key is not read correctly by the Crypto subsystem. Because the MachineGUID value is not read correctly, the Crypto subsystem incorrectly resets the value of the MachineGUID key. Therefore, the existing IIS RSA machinekey is no longer valid, and the IIS Admin service cannot access the metabase". See ME884872 to resolve this problem.

ME234429 shows how to manually restore the metabase when no proper backup exists or when the MMC does not start.
The information we got about this message points to a corruption in the IIS metabase caused by an ungraceful shutdown (i.e. loss of power). Some users have reported that a re-install of IIS fixed this problem but not in all the cases. The "metabase" is the location of the IIS configuration parameters. For example, file and directory access permissions used by IIS 5.0 are stored in the metabase. To see at least if you can open the metabase try to use MetaEdit from the IIS Resource Kit.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.