Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4096 Source: VsJITDebugger

An unhandled exception ("XihSolutions.DotMSN.DotMSNException") occurred in InstantAnswersService.exe [4024]. Just-In-Time debugging this exception failed with the following error: Debugger could not be started because no user is logged on.
Application: SilverSHielDSvc.exe - Silver Shield is a Secure FTP Server and it crashed on a remote server when a large number of files were being downloaded from it. Obviously a bug in the software, it was "fixed" by restarting the crashed service.
This message indicates that an application (the name of the file is recorded in the event) has crashed while there was no one logged in. If a user is logged in, the VsJITDebugger (Visual Studio Just-In-Time Debugger) would have prompted him about the application crash, asking if he wants to debug this application. Unless the user is the actual developer of that application, this is pretty much a useless question but one gets this if Visual Studio is installed on that computer. That being said, frequent messages like this indicate a problem that has to be addressed before data is lost, especially if the application specified is a Windows operating system component such as svchost.exe.
EV100059 has a list of common Just-In-Time-Debugging (JITD) errors.

A typical error is "Debugger could not be started because no user is logged on." - This error occurs when Just-In-Time debugging tries to start Visual Studio on a machine where there is no user logged onto the console. Because no user is logged on, there is no user session to display the Just-In-Time debugging dialog box. To fix this problem, log onto the machine.
For application zshp1020.exe, see EV100060.
See the link to "Just-In-Time Debugging Errors" for information about this error.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.