Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 672 Source: Security

Authentication Ticket Granted:
User Name: Administrator
Supplied Realm Name: ALTDOMAIN
User ID: %{S-1-5-21-1390850448-2335789268-393128203-500}
Service Name: krbtgt
Service ID: %{S-1-5-21-1390850448-2335789268-393128203-502}
Ticket Options: 0x40810010
Ticket Encryption Type: 0x17
Pre-Authentication Type: 2
Client Address:
See the link to "Audit Account Logon Events" for details on this event.
This event record indicates that an authentication ticket has been granted. See MSW2KDB for more details.
This event indicates a success Windows 2000 Active Directory logon through Kerberos. See ME274176 for more details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.