Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2002 Source: Perflib

The Open Procedure for service <service name> in DLL <dll name> has taken longer than the established wait time to complete. The wait time in milliseconds is shown in the data.
If the "OpenProcedureWaitTime" value is present in the HKEY_LOCAL_MACHINE\SOFTWARE \Microsoft\Windows NT\CurrentVersion\Perflib registry, perflib sets up a timeout procedure internally. If the "Open" function of a Performance Monitor Extension DLL does not return within the time specified, in milliseconds, in this registry value an event (2002) is posted to the Event Log. However, it only controls the reporting of the fact, it doesn't control the behavior. For example, if an Open function "hangs" then the Performance Monitor process will "hang" regardless of the presence of this registry value.

ContentFilter - QPerf.dll - Used by the Index Service.
- Service: AppleTalk, dll: atkctrs.dl - See ME924208.
- Service: MSExchangeT120, dll: xrtcperf.dll -  This behavior may occur if the servers in your conferencing site do not all have the same version of the Exchange 2000 Conferencing Server service pack installed. See ME330341 for more details.
- Service: RemoteAccess, dll: rasctrs.dll - See Citrix Support Document ID: CTX103199.

As per Microsoft: "The performance counter provider could not return performance counter data within the specified open timeout period. Either there is a problem with this performance counter provider or the service it is collecting data from, or the system was too busy when this call was made". See MSW2KDB for more details on this issue.
Set the default value of 5 mil sec to 12 mil sec of the following key:
HKEY_LOCAL_MACHINE->System->CurrentControlSet->Services->PerfDisk->Performance->Open Timeout
Service name: "Oracle80", DLL "oraperf.dll" - This problem affects Oracle running on NT after the patch is applied. The cause was the Oracle bug 1020803. This bug is fixed in patch

PerfDisk - perfdisk.dll - Occurring after installing Citrix Resource Management Service ver 1.0b

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.