Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 212 Source: SpntLog

Source
Level
Description
The compressed file "<path>\<file name>" contains a file "<file name>" that is larger than 60 MB. The file was skipped by manual (task) scan.
Comments
 
For information on how to disable these events, see the link to "Trend Micro Support Solution ID: 119613".
This error appear to caused by virus scan that skips files because of file size. It is typical for antivirus programs to have problems with large zipped files.
This occurs when compressed or not compressed files is larger than 60 MB. The maximum size is adjustable. See the information at Trend Micro.
By default Real time scan will skip all files that are larger than 30 MB. Moreover, Manual scan will skip files that have more than 60MB in size. For compressed or zip files, ServerProtect will consider the file size of the contents and not the size of the compressed file itself. This is because ServerProtect will first decompress the file before scanning.

A solution (ID 8248) is available at from Trend Micro. The solution is also applicable to higher versions of ServerProtect as these versions use the same scan engine.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...