Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1312 Source: KIXTART

Source
Level
Description
WkstaUserGetInfo failed Error: A specified logon session does not exist. It may already have been terminated. (0x520/1312).
Comments
 
The Schedule Service does not have Domain User permissions. Because a script is set to run from the AT commannd the schedule service is "User" that runs the script. Grant the schedule service Domain user permissions and you will no longer receive the message.
This is a known bug with the version in use. Kixtart uses the LocalSystem account versus as domain user account. I upgraded kix32.exe from 4.01 to 4.10a (stable) on NTSRV1. The event log errors have not continued since.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...