Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4202 Source: Tcpip

Source
Level
Description
The system detected that <network adapter> was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.
Comments
 
T735969 suggests that this problem can be fixed by removing and re-adding the TCP/IP protocol. See the article for details.
If you are using an Enterasys 802.1X switch, see ME938115.
Your computer's network adapter lost connection with the network. See MSW2KDB for information on this event.

ME325487 provides information on how to troubleshoot network connectivity problems.
The server received the event 4201 followed by this event. The pattern kept repeating over 3 weeks. The problem was resolved when the switch failed and was replaced by a new switch.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...