Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 3005 Source: ASP.NET

Event message: An unhandled exception has occurred.
Event time: 8/17/2005 12:17:37 AM
Event time (UTC): 8/17/2005 5:17:37 AM
Event ID: 14b7f24102e140bbbae302d80e5a5f36 Event sequence: 7 Event occurrence: 1 Event detail code: 0

Process information:
Process ID: 2292
Process name: WebDev.WebServer.EXE
Account name: DOMAIN\User

Exception information:
Exception type: System.NullReferenceException
Exception message: Object reference not set to an instance of an object.

Request information:
Request URL: http://localhost:2087/WebSite3/Default.aspx
Request path: /WebSite3/Default.aspx
User host address:
User: DOMAIN\User
Is authenticated: True
Authentication Type: NTLM
Thread account name: DOMAIN\User

Thread information:
Thread ID: 7
Thread account name: DOMAIN\User
Is impersonating: False
Stack trace: at _Default.Page_Load(Object sender, EventArgs e) in c:\Documents and Settings\user\Desktop\WebEvents\WebSite3\WebSite3\Default.aspx.cs:line 15
at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e)
at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e)
at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive()
at System.WebUI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
In most cases, this event is caused by problems in the code behind the page causing the problem. If possible, isolate the various parts of code and identify the faulting one.

The event contains the error type and the error description returned by the code (the "Exception message" section). For example, the error message for the event used as sample here is:

Object reference not set to an instance of an object.

This is a typical programming error where a variable is referred to in the code without actually initializing it first.

The troubleshooting process should focus on that error message as it is the most relevant bit of information.

ME893664 describes a way to get notified for this type of errors.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.