Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4004 Source: DFSR

The DFS Replication service stopped replication on the replicated folder at local path E:\Files\Information Technology.

Additional Information:
Error: 9098 (A tombstoned content set deletion has been scheduled)
Additional context of the error:  
Replicated Folder Name: Information Technology
Replicated Folder ID: 3E205C8A-60E4-436A-8B6A-9DDBEE2F6B54
Replication Group Name: <domain name>\data\information technology
Replication Group ID: BD7D0BDA-22D9-4294-93EC-CF715A4EA5A5
Member ID: 2A896016-35CC-4F7A-8C83-256E744D1540
According to ME977381, in certain conditions, when the DFS Replication service initializes the replicated folders for the replication process. A hotfix is available. See the article for more details.
EV100526 (The DFS replication service stopped replication on the replicated folder at local path) provides another example on how this event can be troubleshooted.
EV100527 (Kickstarting Toublesome DFS Replication Groups) provides another example on how to troubleshoot this type of problem.
This seems to have happend when we started using an online backup service. We have excluded the directories we want to replicate from the backup set to no avail. Removing / disabling the backup software corrected the problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.