Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 12507 Source: DistributedLinkTracking

Level
Description
The volume ID for <volume> has been reset, since it was a duplicate of that on <volume>. This volume ID is used by Distributed Link Tracking to automatically repair file links, such as Shell Shortcuts and OLE links, when for some reason those links become broken.
Comments
 
This event appeared in my System log after I cloned a partition to another area on my laptop's hard drive with Paragon Hard Disk Manager. I cloned F: to a temporary partition, deleted and recreated F:, and moved the files back to the new F:, as the MFT on the original F: took up 50% of the partition. Normally I would have created a new SID for the temporary partition, but I planned on deleting it immediately after moving the files back to F:. I found this event message two days after doing the partition maintenance, and I was not aware of any problems occurring because of the duplicate ID. I did not reboot the laptop during the process, and I suppose a problem might have occurred if I had done so with two partitions with duplicate IDs.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...