Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4214 Source: COM

Source
Level
Description
The QC Player detected an invalid QC message. The message will be moved to the deadqueue.
Unauthenticated
Server Application ID: <application ID>
Server Application Name: <application name>
Error Code = <error code>: Catastrophic failure
COM+ Services Internals Information:
File: .\lquereceive.cpp, Line: 1243
Comments
 
- Error code: 0x8000ffff - As per Microsoft: "This error usually occurs because the Authentication Level on the COM+ Application was increased to a value higher than None after the application proxy was exported to the sending computer. QC uses authenticated messages with applications that have an Authentication Level other than None. You may also receive this error if you send unauthenticated messages when the application didn't require authentication". See ME269292 to solve this problem.

As per Microsoft: "When you move an unauthenticated COM+ Queued Component Message from a Dead Queue back to a Public Queue, the Queued Component Listener will loop infinitely and will generate an Event ID: 4214 application event log message for each iteration". See ME840999 for a hotfix applicable to Microsoft COM+ 1.0, when used with Microsoft Windows 2000.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...