Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 5102 Source: RemoteAssistance

RA: A XML parsing error for (local user) <user name> occurred when attempting to process a remote assistance ticket.
This event is logged when you end a Remote Assistance session from a Systems Management Server 2003 Administrator console on a computer that has Internet Explorer 7 installed. See ME940181 for additional information about this event.
When using Remote Assistance, a local user called HelpAssistant is needed on the novice machine.  If this user has been removed, start Windows in safe mode and enter sessmgr.exe -service in the run command. This will recreate the HelpAssistant user and allow you to offer remote assistance.
This event is informaional, however, it contains an error description. In my case, this event was generated on an "Expert" computer and event 5252 on a "Novice" computer. See the comments for Event ID 5252.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.