Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1699 Source: NTDSReplication

Level
Description
The local domain controller failed to retrieve the changes requested for the following directory partition. As a result, it was unable to send the change requests to the domain controller at the following network address.
Directory partition: <directory partition>
Network address: <network address>
Extended request code: 0
Additional Data
Error value: 8451
The replication operation encountered a database error.
The only partition that is failing to replicate is the <partition name> partition.
Comments
 
See ME943576 for a hotfix applicable to Microsoft Windows Server 2003.

This event may incorrectly be logged. See ME953392 for a hotfix applicable to Windows Server 2008.

This event may occur when there are many proxy addresses under the Active Directory objects that are referenced in the event. Each of these objects has a non-linked multivalued attribute. When the values of these non-linked attributes exceed the maximum attribute limit for the forest functional level, the server cannot process the object. See ME914036 to fix this issue.
As per Microsoft: "This problem may occur if the global catalogs in your forest contain an object that has a security descriptor that has been corrupted or is not in the correct format. In particular, this problem occurs if the msExchSecurityDescriptor property has been written to the object instead of to the NTSecurityDescriptor (NTDS) property. Microsoft Windows 2000 Service Pack 4 or later does not permit the msExchSecurityDescriptor property to be written to the global catalog object. However, if the msExchSecurityDescriptor property already exists in the global catalog, it is not removed by a computer that is running Windows 2000 Service Pack 4 or later". See ME832851 for a hotfix.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...