Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 30003 Source: LiveCommunicationsUserReplicator

Failed to update the list of domains in this forest to synchronize. The error that occurred was 49 (Invalid Credentials) User Replicator has a list from a previous cycle and will continue to use the old list. If this error continues to occur it indicates that Live Communications Server is unable to access the CN=ConfigurationCN=PartitionsDC=<domain> portion of Active Directory.
As per Microsoft: "Check the service account for the 'Live Communications Server' service and ensure that its password hasn't expired. If so, reset the password in AD (you may want to set the password to never expire if your company policy allows this) and then in services.msc in the 'Live Communications Server' service properties, 'Log On' tab type in the password and confirm it there. Then re-start the service. If this doesn't solve the UR issue, then you'll need to determine the reason why the Live Communications Server is unable to access the  CN=Configuration, CN=Partitions, DC=THIS DOMAIN portion of Active Directory."

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.