Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1312 Source: NTDSKCC

The call to the Intersite Messaging Service (ISM) specifying the transport CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=dsqalab,DC=volvo,DC=net failed with the following status:

The RPC server is unavailable.

This condition is causing the Directory Service consistency checker to fail to correctly configure an inter site replication topology. Please verify that the ISM is running and the correct plug-in dll for the transport is available.

The record data is the status code.

Status code:
0000: ba 06 00 00
See the link to "EventID 1312 from source Active Directory" for information about this event.
To resolve this problem, access your services, mark the "Intersite Messaging" service as Automatic, and press Start.
See ME834317 for a hotfix applicable to Microsoft Windows Server 2003.
This event, together with event 1311 from the same source may show up if the Intersite Messaging Service (ISM) is disabled. The Microsoft "Security Operations Guide for Wndows 2000 Server" states that this service can be disabled if you do not use SMTP for AD replication, but this seems to be wrong. The service is needed even if you have IP based replication.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.