Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 25007 Source: HealthServiceModules

The EventLog service reported that the Application event log on computer '<computer name>' is corrupt. The Windows Event Log Provider will attempt to recover by re-opening log.

One or more workflows were affected by this.  

Workflow name: <name>
Instance name: <name>
Instance ID: <name>
Management group: <group name>

For more information, see Help and Support Center at
One obvious suggestion for troubleshooting this event is to clear the log specified in the event description and restart the Health Service Module. This worked for some users, though others reported that it did not fix the issue. If the log specified is the Security one, there might be a permissions problem as the Security log requires admin privileges. Make sure that the service runs under an account that has the right permissions. See EV100539 (Event ID: 25007 on MS Server).

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.