Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4198 Source: Tcpip

Source
Level
Description
The system detected an address conflict for IP address www.xxx.yyy.zzz with the system having network hardware address 00:A0:0A:00:A0:AA. The local interface has been disabled
Comments
 
When you use unicast NLB, a virtual media access control (MAC) address is generated automatically based on the cluster IP address. When you run in multicast mode, a multicast MAC address is used. The address conflict occurs because the multicast MAC address and the unicast MAC address do not match. See ME282023 to solve this problem.
As per Microsoft: "Media access control addresses are preassigned and permanently burned into the network interface card (NIC). These addresses under normal  circumstances are always unique, however, rare errors made during the manufacturing process can cause duplicate media access control addresses to be used and cause this problem.". See ME164903.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...