Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 3208 Source: REPLICATOR

Source
Level
Description
The replication server could not update directory <directory name> from the source on <export server name> due to error <error number>.
Comments
 
As per Microsoft: "When the replication interval passes, the import computer reads the registry of the export server to determine replication parameters. By default, only the Administrators group has permission to remotely access the registry. If no other groups or users were specified in the access control list, or if the registry path is not specified as an allowed path, the account used for replication is denied access and replication fails". See ME168464 for details on this problem.

See "JSI Tip 5153" for additional information about this event.
As per Microsoft: "The replicator service requires exclusive use of resources, such as directories and all of their subdirectories being imported or exported, and files on the REPL$ and NETLOGON shares. Any violation of this exclusive use, such as File Manager having one of these directories open, or users connected to the NETLOGON share, causes this problem." See the link below for more details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...