Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2059 Source: MSExchangeRepl

The log file 897 for Exchange2007server\First Storage Group is missing on the production copy. Continuous replication for this storage group is blocked. If you removed the log file, please replace it. If the log is lost, the passive copy will need to be reseeded using the Update-StorageGroupCopy cmdlet in the Exchange Management Shell.
The log file mentioned in the event id 2059 matches the last log in the previous backup set.
As per ME976592, this event can be recorded if you are running a Microsoft Exchange Server 2007 Cluster Continuous Replication (CCR) Cluster service and you use Symantec NetBackup v6.5.3 or a later version to perform a full system backup.

When the Microsoft Exchange Replication service determines which transaction log files have to be replicated to the passive node, the Exchange Replication service checks which log files are present on the disk on the active node. Then, the Exchange Replication service compares the log files that have the value of the previous Full Backup Log Gen. If the value of the Previous Full Backup Log Gen is less than the lowest log generation present on the active node, then the 2059 event will be logged and the replication will fail.

See the article for a workaround.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.