Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2011 Source: FPNWSRV

Source
Level
Description
The server's configuration parameter "irpstacksize" is too small for the server to use a local device. Please increase the value of this parameter.
Comments
 
Some of the MSKB articles on IRPStackSize are a bit dated. Supported values for Windows 2000 and Windows XP can be found on ME177078.
If Replication Exec is installed after installing Windows NT 4.0 Service Pack 4 and if the IRPstackSize registry value is not explicitly present in the NT Registry, then the Setup will add the value to the NT Registry and reset the value to 7. This causes the error messages that the IRP stack size is too small. See the link to "Veritas Support Document ID: 185354" for details on solving this issue.
As per Microsoft: "This problem can occur when the number of installed filter drivers has reduced the available IRPStackSize below the minimum size that is required by File and Print Services for NetWare". See ME299783 to fix this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...