Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2044 Source: McAfeeGroupShield

The OnAccess (Transport) scanner failed to initialize with error <error code>.
McAfee states that these events can be safely ignored if they are generated in small numbers (for example, groups of five or ten). This is a reporting issue that will be addressed in the next Service Pack or Full Release. Read McAfee Solution ID kb38892 for more details. Go to the "McAfee Knowledge Search" page and search for the specified solution.
This event occurs because although some of the processes have initialized successfully, not all of the processes are accepting connections. Once all processes are initialized, this event is no longer recorded. You would normally expect to see only a few of these entries recorded and only on heavily utilized Exchange 2000 servers using either Transport Scanning mode or using features that utilize the transport scanning interface. Examples include: Antispam scanning, File Size restrictions, Disclaimers. This event can be safely ignored if it falls into the definition as listed above.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.