Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 12505 Source: DistributedLinkTrackingClient

Level
Description
A new volume ID has been assigned for C:
{1f137398-ffba-47af-9fc6-90256caa38d1}

This ID is used by Distributed Link Tracking to automatically repair file links, such as Shell Shortcuts and OLE links, when for some reason those links become broken.  If there previously were links to files on this volume that are broken, they might not be automatically repairable.
Comments
 
This event occurs when a server is promoted to Domain Controller. A volume ID is required for the new role of the server.
Can be seen when installing a new or replacement harddrive or reassigning drive letters. Tries to avoid the problem that links and paths in the registry point to old locations when files or directories have been moved.
See ME312403 for information on Distributed Link Tracking on Windows-based Domain Controllers.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...