Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 26006 Source: NetBackup

Source
Level
Description
Unable to read the "First Counter" value under the tapeperf\performance key.
Comments
 
These are orphaned entries that may occur for various applications. Normally, when the performance monitor reads all counters for the first time, the extension's Open procedure is called. It typically reads what range of object indexes it supports from the registry. These index values are stored in the First Counter, First Help, Last Counter, and Last Help registry values under the application's performance key. If this Open procedure fails to read the data, the event id 1008 is recorded in the event log. These orphaned entries can be removed by modifying the following registry key at the remote server:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tapeperf\Performance

Delete the value "Open". Restart your computer for this change to take effect.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...