Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1593 Source: CTXCPUUtilMgmt

Level
Description
CPU Utilization Management cannot determine the owning user of the session associated with process <value>.

Windows system message: A close operation is pending on the session.
Comments
 
If using Windows 2003 Server and Citrix Presentation Server 4.5, we found that after the recent Microsoft updates in March 2012 servers were periodically not accepting users. Noticed an slert for session down state. The only way to clear was to reboot. This message appeared during the reboot process, we assumed becase of the session down alert. Applying the MS Hotfix ME958476 resolved the session down state problems.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...