Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 18 Source: WLBS

Source
Level
Description
WLBS : duplicate cluster subnets detected. The network may have been inadvertently partitioned.
Comments
 
As per Microsoft:
Error Message Explanation: The hosts in this cluster formed two or more separate clusters. This is usually caused by network partitioning that prevents the Network Load Balancing (NLB) heartbeats of one or more hosts from reaching all of the other hosts in the cluster. This event is logged when the network problem is corrected and the hosts converge back into a single cluster.

User Action (Windows Server 2003): Investigate the cause of the network partitioning. No investigation of NLB is necessary.

User Action (Windows 2000 Server): Investigate the cause of the network partitioning. No investigation of NLB is necessary.
See the link to ME216333.
This message indicates a wrong configuration of Windows Load Balancing Service or a faulty network.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...