Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: Microsoft Firewall|
The request was denied because the number of connections per second allowed for the Allow All rule was exceeded. See the help for more information on connection limits.
|English: Request a translation of the event description in plain English.|
As per Microsoft: "ISA Server rejected a connection from the client because its connection limit was exceeded. The event could indicate a flood attack. Use the log filter to determine if the source of the connection is legitimate or the result of a flood attack". See the link to "Microsoft event 15117 from source Microsoft Firewall" for additional information.
|Private comment: Subscribers only. See example of private comment|
|Links: Microsoft event 15117 from source Microsoft Firewall|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated