Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 5730 Source: NETLOGON

Source
Level
Description
Replication of the SAM Global group (RID:0x200) from primary domain controller <computer name> failed with the following error: <error>.
Comments
 
I had the same issue; I was unable to add a 2003 box to the domain. It was a remote site, and we were running the box behind a checkpoint firewall on a windows box. The connection to the provider was PPPoE (which gave us many problems) and we ran a VPN tunnel back to head office, where the DC was. I needed to change the MTU size to 1454 in order to join the domain. There are a few docs about running over PPPoE and MTU size. Its way more hassle than it is worth, but if you have to run this kind of a combination and you're getting this issue, change your MTU size.
ME302597 provides a resolution on this problem.
See ME172302, ME161569, and ME199071 for information on how to troubleshoot this error.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...