Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 160 Source: RemovableStorage

Received Handle Query Remove notification. RSM approved the query remove request.
This event occurs usually prior to a interface REMOVAL notification (event 135). The Windows 2000 Mount Manager (MM) has received a removal notification and the Removable Storage Manager (RSM) has dismounted the interface from the RSM Database. If you have removed or unmounted a drive or volume, or you use a media library (even like tape robotic libraries) you may receive this event. If you haven''t, this event usually occurs when a disk drive fails reporting to the system. This is not always critical, it may occur even if a drive is overheated. Remove and reinstall the drive, and it should work correctly on most cases."

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.