Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 5203 Source: WAS

Source
Level
Description
A process serving application pool 'MSExchangePowerShellAppPool' reported a failure trying to read configuration during startup. The process id was '21744'. Please check the Application Event Log for further event messages logged by the worker process on the specific error. The data field contains the error number.
Comments
 
In my case, this occurs when a batching routine is triggered by the AuctionMaster software.
From a support forum: "This error message shows that  DefaultAppPool has crashed due to some failures in worker process. If you have several web sites in the same pool then try to assign a dedicated pool to each site which helps to isolate the application and to trace this problematic web site easily."
EV100559 (Debug Diagnostic Tool v1.2) can be used to troubleshoot various IIS-related issues.
According to CTX131137, this event may be recorded when the Extensible Transformation Engine (XTE) Service connection fails on cloned server and opening the Web Interface gives the “503 Service Unavailable” error. The article provides 3 workarounds.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...