Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9607 Source: MSExchangeIS

Error code <error code> when preparing for backup.
As per Microsoft: "This event indicates that an error occurred when a third-party backup application was preparing to back up a Microsoft® Exchange Server storage group. The error code in the message provides more information about the cause of the error. Error code 0x50d is one of the most common error codes associated with this event. Error code 0x50d translates to ecBackupInProgress. Error code 0x50d indicates that the third-party backup application cannot start a new backup process because it senses that a different backup is currently in progress". See MSEX2K3DB for information on fixing this problem.
This event indicates that the Exchange VSS writer has detected that an earlier Exchange snapshot backup operation is in an unfinished state. See ME910250 for additional information about this problem.

This event is also logged when a VSS backup operation fails in Exchange 2007 or in Exchange 2003. See ME930800 for information on solving this problem.
If you have Symantec Livestate installed, you will find that this error is generated when the Livestate backup occurs (as it locks the drive). It should be safe to ignore this message.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.