Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4224 Source: wins

WINS encountered a database error. This may or may not be a serious error. WINS will try to recover from it. You can check the database error events under 'Application Log' category of the Event Viewer for the Exchange component, ESENT, source to find out more details about database errors. If you continue to see a large number of these errors consistently over time (a span of few hours), you may want to restore the WINS database from a backup. The error number is in the second DWORD of the data section.
The error messages indicate that WINS is not running because of a corrupt, missing, or renamed Wins.mdb file. See ME205100 for more information about this problem.

See ME943514 and MSW2KDB for additional information about this event.
In my case, a simple restart of the WINS service solved the problem.
Using FileMon from Sysinternals, I found that WINS.EXE was trying to access the root of C:. BUILTIN\SYSTEM did not have access here. Adding SYSTEM into the ACL solved the issue.
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or the individual software update. See ME239655 for information on how to do that.
This behavior can occur if the WINS database is damaged or is missing from the "%SystemRoot%\system32\wins" folder. See ME225346 for more details.

See ME168595 - Debugging WINS Event ID 4224.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.