Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 623 Source: ESENT

<process name> (<PID>) The version store for instance <instance> ("<name>") has reached its maximum size of <value>Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back. Possible long-running transaction: SessionId: <value> Session-context: <value> Session-context ThreadId: <value>.
In my case, i have this error message :  wuaueng.dll SUS20ClientDataStore: The version store for this instance (0) has reached its maximum size of 8Mb.

An issue was found here : EV100528 (Problem with wuaueng.dll SUS20ClientDataStore).

1. This error generally appears on a Client machine when they cannot connect to the information store on the server. Contact your System Administrator for more help.
The version store has reached its maximum size because of unresponsive transaction
If you are not connected to any server, you may try this step:

Register the Wuaueng.dll file

To register the Wuaueng.dll file, follow these steps:
a. Click Start, click Run, typeregsvr32 Wuaueng.dll, and then clickOK.
b. When you receive the following message, click  OK:
DllRegisterServer in Wuaueng.dll succeeded.

2. Click on Start --> Run --> type in their services.msc
find and stop the Automatic Update service
then go to c:\windows\SoftwareDistribution folder and rename the folder DataStore
then follow the first step and restart the Automatic Update Service

** By doing this you may loose Update History but it will be ok and will rebuild during next update.
This issue occurs because the RIS Groveler service tries to perform cleanup work on a transaction that is too large to process. See ME900617 for a hotfix that breaks up the single large transaction into several smaller transactions. The hotfix is applicable to Microsoft Windows Server 2003.
See the link to "EventID event 623 from source ESE" for details on this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.