Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4001 Source: DNS

Source
Level
Description
The DNS server was unable to open zone <domain name> in the Active Directory. This DNS Server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.
Comments
 
In one case, this occurred on Windows 2000 when Active Directory and DNS were installed for the first time for a domain. It stopped after the new domain controller was restarted.
This event can be ignored if it occurred when Windows was started in Active Directory Restore mode or some other form of Safe Mode. Otherwise, investigate further.
To resolve this problem, obtain the latest service pack for Windows 2000. See ME258072 for more details.
The DNS is probably configured to load from the Active Directory but there is no AD configured. So put it to load from file.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...