Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1960 Source: NTDSReplication

Level
Description
Internal event: The following domain controller received an exception from a remote procedure call (RPC) connection. The operation may have failed.

Process ID: <PID>

Reported error information:
Error value: The RPC server is too busy to complete this operation. (1723)
Domain controller: <DC>

Extended error information:
Error value: The RPC server is too busy to complete this operation. (1723)
Domain controller: <DC>
  
Additional Data
Internal ID: <ID>.
Comments
 
We began getting this error, plus FRS errors after our FSMO role holder was down for 3 days. When we brought it back online, and after about an hour, we checked replication through repladmin and it was replicating fine, but we were still getting this error, and the FRS errors. Going into Sites and Services and forcing replication for each domain controller and the FSMO role holder at the NTDS level appeared to have solved the problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...