Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 206 Source: ESE98

Information Store (1548) Database D:\Exchsrvr\StorageGroup\DatabaseName.edb cannot be incrementally backed-up. You must first perform a full backup before performing an incremental backup.
For more information, click
This event is logged when you try to run an incremental Volume Shadow Copy Service (VSS) snapshot backup on an Exchange 2003 server, because During the soft recovery, the Exchange store changes the backup type in the database header from snapshot to normal. See ME930197 for a hotfix applicable to Microsoft Exchange Server 2003.

See MSEX2KDB for additional information about this event.
See the link to "Veritas Support Document ID: 263514" for information on this event.
As per Microsoft: "The backup type is set to Incremental or Differential, and the database has never had a full backup." We also found that this may happen when you perform maintenance against the Exchange database (and that purges the logs) and then an Incremental or differential backup is performed. You may want also to check the links below.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.