Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The description for Event ID ( 1332 ) in Source (KIXTART ) could not be found. It contain the following string(s): <function name> Error : No mapping between account names and security IDs was done. (0x534/1332).
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is causing the “The description for Event ID ( … ) in Source ( …. ) cannot be found… “?
- GetSid failed
As is the case with most of the events fom Kixtart, the event id represents actually the network error code that Kixtart got when it tried to use the function listed in the event description.
These functions are used by Kixstart to query various variables configured in the script.
LookupAccountSid for example, retrieves the name of the account for this SID and the name of the first domain on which this SID is found. So when Kixstart tried to use this function got the 1332 error which means "No mapping between account names and security IDs was done." - See the link to Error code 1332.
|Private comment: Subscribers only. See example of private comment|
|Links: Error code 1332, Kixstart Home Page|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated