Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2106 Source: MSExchangeADAccess

Level
Description
Process MSEXCHANGEADTOPOLOGYSERVICE.EXE (PID=2236). Exchange Active Directory Provider failed to obtain DNS records for forest DC=intDC=acmeDC=net. DNS Priority and Weight for the Global Catalog servers in this forest will be set to the default values 0 (priority) and 100 (weight).
Comments
 
If event 2105 triggered this alert make sure that the domain controllers for the domain specified in the event description are registered correctly on the DNS server. If event 2106 triggered this alert make sure that global catalog servers for the forest specified in the event description are registered correctly on the DNS server.

In my case a newly introduced 2008 DC in a Windows 2003 domain was not registered as a name server for the delegated zone _msdcs. After adding the server as name server for this delegation the error was solved.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...