Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1403 Source: MSExchangeSRS

Source
Level
Description
Site replication service was unable to obtain legacy account details and cannot continue.
Comments
 
As per Microsoft: "The Site Replication Service (SRS) runs under the local system account, but it needs to contact other directories within the site using the Exchange 5.5 service account. You can configure this account on the administrative group object in Active Directory". See MSEX2KDB for additional information about this event.
As per Microsoft: "This behavior can occur if you install another Exchange 2000 server in a different Active Directory site before replication occurs. After the installation of the second Exchange 2000 server, the directory replication cycle overwrites the msExchEncryptedPassword attribute. When the SRS runs again, it attempts to read the attribute, but is unable to locate it". See the link below for workaround.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...