Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 8329 Source: MSExchangeAL

The Recipient Update Service is starting a rebuild of CN=Configuration,DC=SBDC,DC=local.
As per Microsoft: "This Information event indicates that the Recipient Update Service has started a rebuild operation for the domain. The description of this event indicates the distinguished name of the Recipient Update Service that started the rebuild operation". See MSEX2K3DB for additional information about this event.
RUS rebuilds can be triggered every five seconds, if the domain controller specified for RUS domain and/or enterprise configuration operations is unresponsive. Check your RUS configuration in Exchange enterprise manager and update domain controller selection if needed.
From a newsgroup post: "Re-start the Microsoft Exchange System Attendant service".

From a newsgroup post: "I was getting this error on a one-minute interval and rebooting the server seemed to make it go away for a brief time. I ran “setup/forestprep” and “setup/domainprep” from the Exchange setup directory then restarted the Exchange services and it appears to have corrected the problem".

See ME822794 for additional information on this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.