Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: Removable Storage|
Received Handle Query Remove notification. RSM approved the query remove request.
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the Removable Storage?
This event occurs usually prior to a interface REMOVAL notification (event 135). The Windows 2000 Mount Manager (MM) has received a removal notification and the Removable Storage Manager (RSM) has dismounted the interface from the RSM Database. If you have removed or unmounted a drive or volume, or you use a media library (even like tape robotic libraries) you may receive this event. If you haven''t, this event usually occurs when a disk drive fails reporting to the system. This is not always critical, it may occur even if a drive is overheated. Remove and reinstall the drive, and it should work correctly on most cases."
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated