Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 13538 Source: NTFRSPerf

Source
Level
Description
The call to the registry failed in the Open Function of the FileReplicaConn object. The counter data for this object will not be available. The FileReplicaConn object contains the performance counters of the connections over which files are being replicated by the File Replication Service.
Comments
 
Measures taken to correct the error are identical to those taken to correct EventID: 13537, which is as follows:
- Backup the registry!!! Force the File Replication service to re-create the registry keys tha point to the system monitor counters for the File Replication service.
- Close all non-required windows programs
- At the command prompt, type "net stop NTFRS"
- Run regedt32
- Under HKLM\System\CurrentControlSet\Services\ BACKUP then delete the two keys:
FileReplicaConn (entire key and all subfolders)
FileReplicaSet (entire key and all subfolders)
- Exit regedt32
- At the command prompt, type "net start NTFRS"
- After successful restart of NTFRS, run regedt32
- Ensure the two keys have been re-created.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...