Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 15006 Source: CRS

Replication was aborted due an inability to open a file locally.
This usually follows event 15007, and if so you will find more info about the cause there. It can mean that CRS indexed a file for replication on first pass but the file was renamed or deleted before it could be replicated. A common cause is that the file was open for exclusive access by another process. Check also that the CRS job runs with necessary privileges to read the file.

From Microsoft: Meaning: A file in the source directory on the local machine could not be opened.
Cause: File may be held open exclusively by another application. Recommendation: Free up the file and try again.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.