Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 61 Source: WinMgmt

WMI ADAP was unable to process the <library name> performance library due to a time violation in the <function name> function
If this event is logged when the computer is restarted this may be a temporary error. For other instances, the performance counter registries might be corrupt. See MSW2KDB for more details.

If winmgmt /clearadap doesn't fix your problem, your performance counter registry entries may be corrupted. Every time you install an extensible performance counter, files like PerfStringBackup_nnn.ini are created in the %SystemRoot%\System32 folder, before the registry entries are updated. If you suspect that your performance counter registry entries are corrupt try the following:
1) Use Dir /ON %SystemRoot%\System32\PerfStringBackup*.ini to provide a chronological list of installed counters.
2) Look for a significant change in the size of these files. The file prior to the change is probably good. Restore the performance counter registry entries to this good state by opening a CMD prompt, switching to the %SystemRoot%\System32 folder, and typing lodctr /r:filename, where filename is the last good .ini file.
NOTE: This will remove any performance counters added after the PerfStringBackup_nnn.ini snapshot. You will need to reinstall the counters, or the programs that installed them. If you must reinstall the counter that caused the corruption, monitor the process.
If this error appears at the same time as the system is rebooting, no action is necessary as it is to be expected.
Library: PerfDisk / Function: open
Performance counter registry might be corrupt. To restore the performance counter registry entries to the state described in a PerfStringBackup_xxx.ini file, run the following command

lodctr /r:filename

where filename is the name of the PerfStringBackup_xxx.ini file you want to restore. This is a bug in Windows 2000.

Library: PerfProc / Function: collect
This error is typically generated by a malfunctioning Windows Management Instrumentation (WMI) Performance Library dredger or the dredger getting false information (from malfunctioning performance counters). For more details check the links below.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.