Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 12304 Source: SRMSVC

Source
Level
Description
A File Server Resource Manager Service email action could not be run because the specified SMTP server is invalid. Use the FSRM management console to specify and test a valid SMTP server.

Operation:
   Running email action.
   Handling a file screen audit event.
   Processing File Server Resource Manager event

Context:
   Action type: Email Action
   Action name: Email Action0
   SMTP server: Email server IP  
   Mail-from address:
   Mail-reply-to address:
   Mail-to address:
   Mail-CC address:
   Mail-BCC address:
   Mail subject: Unauthorized file matching "Temporary Files" file group detected
   Mail message text: The system detected that user Domain\User
attempted to save D:\pptE2.tmp on D:\ on server XXXX. This file matches the "Temporary Files" file group which is not permitted on the system.
   File screen path: D:\Data\Shared

Error-specific details:
   Error: IMessage::Send - cdoNTLM 0x80040211
   Error: IMessage::Send - cdoAnonymous 0x80040211.
Comments
 
In my case, this problem appeared because McAfee was blocking port 25.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...