Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9004 Source: MSExchangeSA

The Metabase Update service failed to start, error '<error code>'.
- Error code: 80040a01 - This issue occurs if the Kerberos Key Distribution Center service is not running on the Exchange server and the Exchange server is acting as a domain controller. To resolve this problem start the Kerberos Key Distribution Center service on the Exchange server. See ME327401 for additional information on this event.
- Error code: 80090006 - As per Microsoft: "This issue may occur if there is corruption of the Microsoft Internet Information Services (IIS) metabase on the Exchange 2000 Server computer. Corruption of the IIS metabase may occur for a variety of reasons". See ME831393 to fix this problem.
- Error code: 80040a01 - See ME896703.

See MSEX2K3DB for other possible causes for this event.
This issue may occur if a domain controller or a global catalog is not available or if there is only a very slow connection to the domain controller or global catalog. See ME312859.
This also may occur if the Exchange 2000 Server computer is not listed as a member of the Exchange Domain Servers group. See ME327844.
ME314294 says that you can get this event if the Manage Auditing and Security Log right (SeSecurityPrivilege) was removed for the Exchange Enterprise Servers domain local group on some or all of the domain controllers.

As per ME328646, this issue may occur if the Exchange Enterprise Servers security group does not have "Manage auditing and security logs" permissions on the domain controller.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.