Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4124 Source: Ci

Source
Level
Description
Content index on f:\inetpub\catalog.wci is corrupt. Please shutdown and restart the Content Index Service (cisvc).
Comments
 
This behavior can occur because of insufficient contiguous virtual memory. The dir files associated with each catalog must be mapped into contiguous virtual memory within the 2 GB of CiSvc process address space. If there is insufficient contiguous virtual memory, the catalog fails to start, and therefore the catalog is reported as corrupted and will be deleted. See ME318339 for a resolution on this problem.

See MSW2KDB for additional information about this event.
Often the trouble shooting of catalog corruption involves simply stopping and starting the Index Server. However, sometimes you will need to rebuild the catalog from scratch (stop Index Server, delete or move the contents of the Catalog.wci directory, and then restart Index). See ME209304 for details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...