Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 98 Source: RemovableStorageService

Level
Description
RSM was stopped.
Comments
 
As per Microsoft: "The Removable Storage service was stopped, either automatically because of inactivity or manually by a user. The service will start up automatically if required". See MSW2KDB for more details.
This event also occurs when running Veritas BackUpExec V8.6 on Windows XP and/or on Windows 2003 Server. This service is required to run the backups without errors, yet the service is terminated at completion of the backup. This results in errors on the next backup. My solution was to run a scheduled task consisting of -NET START "REMOVABLE STORAGE"- a few minutes prior to starting each backup.
This event is mostly a result of EventID 102 from source Removable Storage. Please check EventID 102 for details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...