Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2 Source: Print

Source
Level
Description
Printer <printer name> was created.
Comments
 
In my case it appears that this event followed by Event (Event ID:2 printer was created), (Event ID:3 printer was deleted), (Event ID:4 printer is pending deletion), (Event ID:8 printer was purged) and (Event ID:9 printer was set) are created whenever a remote user logs onto my terminal server. They computer has a printer configured on it. The terminal server creates a printer session for each known printer driver it has for the new user. These events happens on a daily basis for my server.
This message will also be generated, when a local printer is mapped into a terminal server session.
Message generated when a new printer is configured.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...