Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9007 Source: TermService

Auto Client Reconnect occurred for user: <user>.
After installing PSE400W2K3R02.0.1 on our PS4 servers, users reported random disconnects. Some users were disconnected once a day and others approximately 20 times per day.
This problem can be identified by enabling logging of successful reconnections in the CMC (Farm settings) then use EventComb to monitor the number of events 9007 on all farm servers.
A support call to Citrix ultimately found that the ICA Listener become corrupt after installing R02.0.1. To fix the problem, delete and recreate the ICA listener. Make sure you check the "use published applications only" checkbox, and then reboot. Use EventComb to verify that the events stopped occurring. Event 9007 is a good thing but excessive numbers of them indicate a problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.