Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 8204 Source: MSADC

Source
Level
Description
When deleting the Store Mailbox from '</o=XXX/ou=XXX/cn=Recipients/cn=user>' on server '<server name>' the operation failed  with the following error code: 3.  (Connection Agreement '<XXX-CA>' #356).
Comments
 
See MSEX2KDB for information about this event.
This may happen when an Exchange 5.5 Mailbox is deleted from the Active Directory side (e.g. using ADUC), and when the mailbox store does not exist (for example, nobody ever logged into that mailbox).
When the Active Directory Connector replicates the deletion, it deletes the Exchange 5.5 Directory entry for the mailbox and attempts to delete the associated mailbox store. When no store exists, this event is logged. In this case, this event may be ignored.
Of course, if the store deletion fails for some other reason (e.g. the Information store is not running), the mailbox store should still be deleted manually to avoid a DS/IS consistency check recreating the Directory entry.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...