Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: NTDS KCC|
All servers in site CN=DWB-Main,CN=Sites,CN=Configuration,DC=EXISS,DC=local that can replicate partition CN=Configuration,DC=EXISS,DC=local over transport CN=IP,CN=Inter-Site Transports,CN=Sites,CN=Configuration,DC=EXISS,DC=local are currently unavailable.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is NTDS and what are the roles of its components?
What is KCC?
If a domain controller loses connectivity to the forest, Knowledge Consistency Checker (KCC) generates multiple event ID 1566 entries which can quickly cause the event log to wrap. See ME268109 for a hotfix applicable to Microsoft Windows 2000.
See "EventID 1566 from source Active Directory" for related information.
Installing hotfix ME898060 fixed this problem for me.
In my case, the problem was caused by hotfix ME893066. Uninstalling the hotfix fixed the problem for me.
Peter Van Gils
In our case, every weekend a domain controller in a branch office had to be shut down (for maintenance on a temporary electricity generator). As soon as it went down the event logs on other DCs started filling up with these events. Once the DC was back online, everything went back to normal.
This event is often reported along with event id 1311. See ME214745 and the link to EventID 1311 from source NTDS KCC for troubleshooting procedures.
|Private comment: Subscribers only. See example of private comment|
|Links: ME214745, ME268109, ME893066, ME898060, EventID 1311 from source NTDS KCC, EventID 1566 from source Active Directory|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated