Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 3003 Source: LoadPerf

The SYSTEM\CurrentControlSet\Services\ESENT\Performance key could not be opened or accessed in order to install counter  strings.The Win32 status returned by the call is in the Record Data as  DWORD 0.
To fix this on a Citrix server, log on to the console as Administrator and open Outlook. You do not need to set up anything with it, but by opening it, it will resolve the issue. See the link to "Citrix Forums Thread - LoadPerf Errors" for additional information.
See ME931914 for a situation in which this event occurs.
I received this event along with events 3009 and 3011 from the same source. The issue was Outlook 2003 on a 2003 server. Deleting the "HKLM\System\Current Control Set\Services\Outlook\Performance" registry key fixed the issue.
When using Citrix\Terminal Services, if you install Office 2003 you must login as an administrator to complete the configuration of the Performance Counters. An event ID 1000 will confirm the load\unload of performance counters. After that, all users should be able to launch Outlook without any errors being written to the event log.
See ME325727 article below.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.