Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 8000 Source: ntbackup

Begin Backup of "System State"
Verify:  On
Mode:  Append
Type:  Copy
As per Microsoft: "The specified backup has started. One Begin Backup event appears in Event Viewer for each backup type created during a backup operation. For example, two Begin Backup events appear if you started a backup of your C: drive and System State". See MSW2KDB for additional information about this event.
This event is generated by NT Backup on Win2000. Event 8000 is triggered by the startup of the backup process. In this example, "System State" backup and the above options had been selected. See ME269826, ME318429, ME814891, and ME840013 for additional information.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.