Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2050 Source: MSExchangeDSAccess

Process <process name> (PID=Process_ID). The shared memory heap could not be created.
This issue occurs when the Davex.dll and Exprox.dll files are not running in the Inetinfo.exe process. See ME926085 for information on fixing this problem.

This issue may occur if the ExchangeApplicationPool application pool is deleted from the application pools in Internet Information Services (IIS). See ME906907 to solve this problem.

As per Microsoft: "This event indicates that DSAccess service startup will fail because it failed to create the shared memory heap. This may be caused by internal Epoxy failures, running out of memory generally, or too many processes running DSAccess. Epoxy has a limit of 10 processes per heap". See MSEX2K3DB for additional information about this event.
This issue may occur when the Exchange virtual directory is either not running in the correct application pool, or when the ExchangeApplicationPool property has the incorrect identity. See ME829167 and ME841546 to fix this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.