Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
MSExhangeIS (491) Unable to create the log. The drive may be read only, out of disk space, misconfiged, or corrupted. Error <error code>
|English: Request a translation of the event description in plain English.|
- Error: -1811 - See ME275602.
- Error: -519 - See ME327904.
Error code: -1032. In our case, after checking the Norton Antivirus scanning history, we discovered that the edb.log file was quaratined. Excluding it from the antivirus scan fixed the problem.
Error code: -1032. We found that the antivirus was scanning all files on the Exchange server, including the transaction logs (where this problem seems to originate). Once antivirus was set to exclude the relevant Exchange Directories, all was well.
Error code: -1032. This error can be caused but a conflict between exchange and a antivirus program. ME247788 described what we saw exactly.
|Private comment: Subscribers only. See example of private comment|
|Links: ME247788, ME275602, ME327904|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated