Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1

Source
ACPIEC
Level
Error
Description
\Device\ACPIEC: The embedded controller (EC) hardware didn't respond within the timeout period. This may indicate an error in the EC hardware or firmware, or possibly a poorly designed BIOS which accesses the EC in an unsafe manner. The EC driver will retry the failed transaction if possible.
Source
Acronis Scheduler
Level
Error
Description
Scheduler failed to run task  with GUID 'C73DF26C-DA36-4B34-A03E-033834498780' because of error 2 (Failed to find the file (folder) or the key (value) in the registry.).
Source
acvpnagent
Level
Error
Description
Function: CPhoneHomeAgent::PostDataFile
File: ..\PhoneHomeAgent.cpp
Line: 1650
Invoked Function: CFileUploader::PostDataGetResponse
Return Code: -29032421 (0xFE45001B)
Description: HTTP_SESSION_ERROR_TIMEOUT
Failed to post customer experence feedback data (C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\CustomerExperienceFeedback\outbound\feedback_data1.cef)
Source
AFAMGT
Level
Error
Description
\Device\AFA0:Enclosure 0 - <description>
Source
afaport
Level
Error
Description
\device\AFAO: <description>
Source
afasa
Level
Error
Description
\Device\Afa0:edule through FAST
Source
afasup
Level
Error
Description
\Device\AFA0 : edule through FAST
Source
Altiris Deployment Server
Level
Error
Description
Database Error: ConnectionWrite (send()).
General network error. Check your network documentation.
Source
ApplicationExperienceInfrastructure
Level
Warning
Description
The application (<application name>, from vendor <vendor name>) has the following problem: <program name> is incompatible with this version of Windows. For more information, contact <vendor name>.
Source
appmon
Level
Error
Description
The following service was not operating: winmgmt
Source
ASA 9.0
Level
Information
Description
The description for Event ID ( 1 ) in Source ( ASA 9.0 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description, see Help and Support for details. The following information is part of the event: QuickBooksDB17, Starting service QuickBooksDB17.
Source
ASA 9.0
Level
Error
Description
The description for Event ID ( 1 ) in Source ( ASA 9.0 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ASANYs_sem5; *** ERROR *** Assertion failed: 201819 (9.0.2.3347)
Checkpoint log: invalid bitmap page.
Source
ati2mtag
Level
Error
Description
Insufficient buffer size, unable to proceed.
Source
AutoEnrollment
Level
Error
Description
Automatic certificate enrollment for local system failed to download certificates for ROOT store from ldap:///CN=Certification Authorities,CN=Public Key Services,CN=Services,CN=Configuration,DC=entrp,DC=pri?cACertificate?one?objectCategory=certificationAuthority
(0x8007006e). The system cannot open the device or file specified.
Source
AVDiagnostics
Level
Error
Description
The description for Event ID ( 1 ) in Source ( AVDiagnostics ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
Avg7UpdSvc
Level
Information
Description
Service started.
Source
Avg7UpdSvc
Level
Information
Description
Service stopped.
Source
BeTwinService
Level
Error
Description
BeTwinService: C0000001 WorkerCreateSession failed.
Source
BLink
Level
Error
Description
Exception caught while processing EvStaUpd.
Source
BXOIS
Level
Error
Description
Initiator failed to connect to the target. Target IP address and TCP Port number are given in dump data.
Source
CanonPrinterDriver3
Level
Error
Description
DrvDocumentPropertySheets 6A900000 77FCC37C ACCESS_VIOLATION.
Source
ccPwdSvc
Level
Information
Description
Application started
Source
CimNotify
Level
Error
Description
The description for Event ID ( 1 ) in Source ( CimNotify ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
CIOArrayManagement
Level
Error
Description
scsi: LUN bad, ha index <index>, device <device>, LUN 0
Source
Cisco TFTP
Level
Error
Description
The description for Event ID ( 1 ) in Source ( Cisco TFTP ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
CLUSIIS4
Level
Error
Description
Can't access IIS metabase configuration for server W3SVC instance <instance> error 2147549448.
Source
CMI
Level
Error
Description
The CMI encountered the following error: <error code> <error message>.
Source
Commerce Server Web Services
Level
Error
Description
An exception occurred in the 'CatalogWebService' Web service. Exception details follow:
<exception details>.
Source
Communicator
Level
Error
Description
Communicator was unable to locate the login server. No DNS SRV records exist for domain <domain name> so Communicator was unable to login.

Resolution:
Please double-check the server name to make sure that it is typed correctly.  If it is correct the network administrator will either need to use manual configuration to specify the login server''s fully-qualified domain name (FQDN) or add DNS SRV records for the <domain name> domain in order to allow automatic client configuration. The DNS SRV records _sipinternaltls._tcp._sipinternal._tcp and/or _sip._tls may need to be configured if automatic configuration is desired.
Source
Compaq Insight Manager 7
Level
Error
Description
SMTP Host Name is not configured under settings..
Source
cppwot3
Level
Error
Description
The description for Event ID ( 1 ) in Source ( cppwot3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: NotebookLibMain (detach) failed.
Source
crypt32
Level
Error
Description
Successful auto update of third-party root certificate:: Subject: <subject> Sha1 thumbprint: <thumbprint>.
Source
CSAdminServer
Level
Error
Description
Database error occured: Error information: 1950/3621 (Generic db error: "Database error: code = 3621 message="IDispatch error #3119" description="DELETE statement conflicted with COLUMN REFERENCE constraint "FK_fts_uagents__Hosts_nId". The conflict occurred in database "KAVA" table "fts_uagents" column "nAgentHostId".
DELETE statement conflicted with COLUMN REFERENCE constraint "FK_fts_uagents__Hosts_nId". The conflict occurred in database "KAVA" table "fts_uagents" column "nAgentHostId".
The statement has been terminated." source="Microsoft OLE DB Pro) O:\CS AdminKit\development2\server\db\ado\db_adoprepstmtimpl.cpp 376
Source
CTBusBroker
Level
Error
Description
Unable to register message filters, received error code <error code>.
Source
CVSNT
Level
Information
Description
CVSNT initialised successfully
Source
cvsnt
Level
Error
Description
CVS Lock service initialised successfully.
Source
Desktop Validator
Level
Error
Description
Certificate Revocation Status
Calling Application: lsass.exe
Certificate Name: /C=US/O=XXXXXXX/OU=XXX/OU=PKI/CN=XXX EMAIL XX-12
Certificate Issuer: /C=US/O=XXXXXXXX/OU=XXX/OU=PKI/CN=XXX Root CA 2
Certificate Serial Number: 0C
Revocation Status: Unable to verify
Validation Protocol: OCSP
Validation Url: http://xxx.xxx.xxx.xxx/
Error: Communication error - unable to connect.
Source
DPM-EM
Level
Error
Description
The replica of <drive> on <server> is inconsistent with the protected data source. All protection activities for data source will fail until the replica is synchronized with consistency check. (ID: 3106)


DPM PS ID: 692d6136-728e-4029-82c0-f256f9e4a404:2^|^SERVERNAME^|^Replica is inconsistent^|^DPM Protected^|^Replica^|^DRIVELETTER:.
Source
DSReplicationProvider
Level
Information
Description
The DS WMI Replication provider (Replprov) MOF file was successfully compiled into the WMI repository.
Source
ECM
Level
Error
Description
The description for Event ID ( 1 ) in Source ( ECM agent ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Can not start ECM  can not read Installation directory key.
Source
Eicon
Level
Warning
Description
00001EDC-A comM-IPC 006-04033]
No process is on the other end of the pipe.
Source
elxsli2
Level
Information
Description
Port <value>: Got fabric info: ID=<ID>, RaTov=2710 EdTov=7d0.
Source
eXclaimer
Level
Error
Description
There was an unhandled exception whilst processing an SMTP message in the command OnMessageSubmission. The message will not be affected.
Source
EXTRA!
Level
Error
Description
The description for Event ID ( 1 ) in Source ( EXTRA! ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
ExWin32
Level
Error
Description
The Exchange IFS failed to map drive <drive letter>:. Please free drive <drive letter>: to use Exchange IFS.
Source
Faxination BFax TRxStream Device
Level
Error
Description
Unit 3 failed to initialize using configuration C:\Program Files\Brooktrout\Config\btcall.cfg. Error number & description: 0x1 - Timeout occurred waiting for reset done interrupt.
Source
F-Secure Gatekeeper
Level
Error
Description
Real-time scanning failure occurred. Intercepted file name=C:\DOCUME~1\AMIRNO~1\LOCAL...VBAGFHA02980. For more information, please visit the customer support web pages at http://support.f-secure.com/enu/home/ for assistance.
Source
Ftdisk
Level
Information
Description
An I/O failure occured on \Device\Harddisk)\Ft2
Source
FW1
Level
Error
Description
FW1: <error message>.
Source
Galaxy
Level
Error
Description
Galaxy Library Control Service failed to start: [Error During Galaxy events initialization - retrying!]..
Source
GFI EventsManager
Level
Error
Description
<?xml version="1.0" encoding="utf-16"?>
<CheckResults xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<checkID>1</checkID>
<setID>0</setID>
<checkResult>0</checkResult>
<computer>W2K8DC01</computer>
<resultDetails>
<string>eventsmanager
administrator
</string>
</resultDetails>
</CheckResults>
Source
Google Update
Level
Error
Description
The description for Event ID 1 from source Google Update cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer the display information had to be saved with the event.

The following information was included with the event:

Google Update has encountered a fatal error.
ver=1.3.21.123lang=enid={7F4983B0-001A-47F8-8D60-0FEC91A8494A}is_machine=1upload=1minidump=C:\Program Files (x86)\Google\CrashReports\9e74740a-c7da-4008-ad6a-b4e34a33fd49.dmp

Log Name:  Application
Source:  Google update
EventID:  1
Level:  Error
User:  System
OpCode:
Task Category:  None
Keywords:  Classic
Source
HPQILO2
Level
Warning
Description
Power supply 1 has failed.
Source
HS_Service
Level
Error
Description
HSZDisk error detected.
Source
http-rim
Level
Warning
Description
The description for Event ID ( 1 ) in Source ( httpd-rim ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: SQL: READONLY: creating index "rWin32_UserAccountI": S1000 955 {[Oracle][ODBC][Ora]ORA-00955: name is already used by an existing object
}.
Source
IADSTools
Level
Error
Description
The VB Application identified by the event source logged this : IADsTools Event: <function name>: Unhandled error (Automation error A referral was returned from the server.)
Source
IAS
Level
Information
Description
The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: <username>, <domain name>/Users/<username>, <ip address>, %%3221225497, <RAS device name>>, <ip address>, Async, 3, <IAS rule name>, MS-CHAPv1, %%3221225496.
Source
ICA Client (Vanadium)
Level
Error
Description
The description for Event ID ( 1 ) in Source ( ICA Client (Vanadium) ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:

Vanadium: TW Protocol error: <error message>
Cmd = <command>

The data containing the error is below (1680 bytes).
Source
ICSM
Level
Error
Description
The description for Event ID ( 1 ) in Source ( ICSM ) could not be found. It contains the following insertion string(s): Cluster::Open( ). Failure opening cluster:<cluster name>.
Source
IFXTPM
Level
Information
Description
IFXTPM: Device driver created at <date><time> is started.
Source
IISCTLS
Level
Information
Description
IIS start command received from user <domain>\<user name>. The logged data is the status code.
Source
IISLOG
Level
Error
Description
IIS logging for W3SVC1 has been shutdown because a disk full error has been encountered.
Source
Inoculate
Level
Information
Description
[event time <date: time> event number <value>: machine abc.FQDN: response time <date: time>]
The Job Server started to purge expired logs if there are any.
Source
Intel Client Manager
Level
Error
Description
The -12 voltage has exceeded expected limits.
Source
Intel File Transfer Service
Level
Information
Description
Windows is unable to Register Service.
Source
Intel Server Manager
Level
Warning
Description
Physical Security (Chassis Intrusion) Chassis Intru.: General Chassis Intrusion.
Source
InternetProxy
Level
Error
Description
Unable to generate an e-mail address because the site address SMTP:<email address> is bad.
Source
iScsiPrt
Level
Error
Description
Initiator failed to connect to the target. Target IP address, port number and error status are given in dump data.

Data:


0000: 00 00 0c 00 01 00 66 00 ....f.
0008: 00 00 00 00 01 00 00 c0 .... <.status code c0000001
0010: 01 00 00 00 00 00 00 00 .... (STATUS_UNSUCCESSFUL)
0018: 00 00 00 00 00 00 00 00 ....
0020: 00 00 00 00 00 00 00 00 ....
0028: 9d 3b 7a 91 bc 0c 00 00 ;z.. <<< 9d 3b 7a 91 is IP Address 145.122.59.157
0030: b5 00 00 c0 .. <<< Port number is 00cbc (3260)
<<< b5 00 00 c0 is the status returned by TCP for connect request. Here it is
00000b5 (STATUS_IO_TIMEOUT)
Source
ISS
Level
Error
Description
The description for Event ID ( 1 ) in Source ( ISS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: (event_collector_1) - Event Collector auto re-configuration failed: The license key has expired. Configure your Event Collector with a valid license key. [ID=0x8734003b].
Source
ISService
Level
Information
Description
The description for Event ID ( 1 ) in Source ( ISService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt..
Source
ITSS
Level
Information
Description
The description for Event ID ( 1 ) in Source ( ITSS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
kbdhid
Level
Warning
Description
The driver has detected that this HID keyboard has bad firmware. It is issuing redundant report packets.
Source
klnagent
Level
Warning
Description
Resource is unavailable. Possibly address/port is unavailable or invalid.
Code=1081
Subcode=0
Message='Cannot connect to the component instance '1093;87;1.0.0.0;1093-87''
File='O:\CS AdminKit\development2\kca\prcp\proxybase.cpp'
Line=488
Source
LGTO_Sync
Level
Information
Description
The description for Event ID ( 1 ) in Source ( LGTO_Sync ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event:  Sync Stop done.
Source
LightScribeService
Level
Error
Description
Win32 Error : Function: [HurricaneClientProxy::OpenCDROMDevice] Error opening class device \\.\CDROM1 returned Win32 Error" 5 Description: Access is denied.
Source
LMS
Level
Error
Description
LMS Service cannot connect to Intel(R) MEI driver.
Source
LocationNotifications
Level
Error
Description
A program accessed information from a location sensor or default location

FriendlyName=Windows
ImagePath=C:\WINDOWS\Explorer.EXE
PID=916
Username=
SID=S-1-5-21-2900904017-2134841549-1768330488-1001
Source
LogReaderEvents
Level
Error
Description
The description for Event ID (1) in Source (LogReaderEvents) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE=flag to retrieve this description see Help and Support for details. The following information is part of the event: .
Source
LogSender
Level
Error
Description
The description for Event ID ( 1 ) in Source ( LogSender ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Day '0' out of range 1..31 at C:\Program Files\Common Files\Symantec Shared\Reporting Agents\Win32/addminutes.pl line 137.
Source
LSIControl
Level
Error
Description
The description for Event ID ( 1 ) in Source ( LSIControl ) could not be found. It contains the following insertion string(s): ENS, 1997/09/05 03:15:37- LME-PROFS-DIAMEX(01e8) 1 40720:Error {CT:160()} finding correlation table record.
Source
LStone
Level
Error
Description
device not found - 0x0001.
Source
mailmng.exe
Level
Error
Description
Can't create mail name.
Domain: <domain name> [<domain name>].
Mail name: <mail name>.
Reason: Failed to add the alias '<mail name>'
   at (SmarterMail::SMMailName::throwMailNameError line 652)
   at execute console command --add-mailname(vconsoleapp::start line 128)
   at execute "C:\Program Files\SWsoft\Plesk\admin\bin\mailmng.exe" --add-mailname "--domain-name=<domain name>"
"--mailname=<mail name>"(vconsoleapp::run line 138)
Execute file name: C:\Program Files\SWsoft\Plesk\admin\bin\mailmng.exe
Source
MBSA
Level
Information
Description
Security analysis complete. Scanned from <server ip address>. Microsoft Baseline Security Analyzer version <MBSA version>.
Source
Microsoft Firewall Client 2004
Level
Error
Description
Application [svchost.exe]. Authentication failed. The user credentials were not accepted by ISA Server. Verify that the user account running this application has the required permissions.
Source
Microsoft Project Server Tracing Eventlog Provider
Level
Warning
Description
component: <component name>
File: <file path>
Line: <value>
Error Number: <error code>
Description: <error description>
Source
Microsoft-Windows-CertificateServicesClient
Level
Information
Description
Certificate Services Client has been started successfully.
Source
Microsoft-Windows-FilterManager
Level
Information
Description
File System Filter "<filter name>" (Version <version number>, <date> <time>) unloaded successfully.
Source
Microsoft-Windows-Kernel-EventTracing
Level
Warning
Description
The backing-file for the real-time session "WDC.BE95A9B1-DE15-4B78-B923-A12AB70BE951" has reached its maximum size. As a result, new events will not be logged to this session until space becomes available. This error is often caused by starting a trace session in real-time mode without having any real-time consumers.
Source
Microsoft-Windows-Kernel-General
Level
Information
Description
The system time has changed to ‎2009‎-‎01‎-‎27T04:52:59.638000000Z from ‎2009‎-‎01‎-‎26T04:52:59.640311000Z.
Source
Microsoft-Windows-Power-Troubleshooter
Level
Error
Description
The system has resumed from sleep.
Sleep Time: T07:10:36.996459500Z
Wake Time: T17:56:11.598062800Z
Wake Source: Power Button
Source
Microsoft-Windows-SpoolerWin32SPL
Level
Error
Description
The print spooler failed to import the printer driver that was downloaded from <ServerName> into the driver store for driver <DriverName>. Error code= 800f0242. This can occur if there is a problem with the driver or the digital signature of the driver.
Source
Microsoft-Windows-WHEA-Logger
Level
Error
Description
A fatal hardware error has occurred. A record describing the condition is contained in the data section of this event.
Source
mnmsrvc
Level
Error
Description
Service Error in StartServiceCtrlDispatcher failed.
Source
Mobile Information Server HTTP Connector
Level
Information
Description
HTTPConnector is successfully loaded.
Source
MpfService
Level
Warning
Description
The description for Event ID ( 1 ) in Source ( MpfService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
MSExchange Autodiscover
Level
Error
Description
Unhandled Exception "Could not find any available Global Catalog in forest llcfors.local."
Stack Trace:
...
Source
MSExchangeCoCo
Level
Error
Description
Operating system error {WIN32:32(The process cannot access the file because it is being used by another process.)} from eraseFile
Source
MSExchangeES
Level
Information
Description
The Microsoft Exchange Event Service stopped successfully.
Source
MSExchangeNOTES
Level
Error
Description
Operating system error {WIN32:32(The process cannot access the file because it is being used by another process.)} from eraseFile.
Source
MSSQLSERVER/MSDE
Level
Information
Description
You are running a version of Microsoft SQL Server 2000 or Microsoft SQL Server 2000 Desktop Engine (also called MSDE) that has known security vulnerabilities when used in conjunction with the Microsoft Windows Server 2003 family. To reduce your computer's vulnerability to certain virus attacks, the TCP/IP and UDP network ports of Microsoft SQL Server 2000, MSDE, or both have been disabled. To enable these ports, you must install a patch, or the most recent service pack for Microsoft SQL Server 2000 or MSDE from http://www.microsoft.com/sql/downloads/default.asp.
Source
MSSQLServerOLAPService
Level
Error
Description
The description for Event ID ( 1 ) in Source ( MSSQLServerOLAPService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: MSSQLServerOLAPService error: 6 SetServiceStatus failed.
Source
named
Level
Error
Description
.\socket.c:1934: unexpected error:

or

socket() failed: Invalid argument
Source
Navisphere Agent
Level
Error
Description
Agent Main exception --Agent Main exception -- <error>
Source
NDS Server
Level
Error
Description
The description for Event ID ( 1 ) in Source ( NDS Server ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.
Source
NetCfgSvr
Level
Error
Description
NetCfgSvr: Bad service request (opcode=13)
Source
Networker
Level
Error
Description
NetWorker media: (<message type>) <description>
Source
NextPageCommon
Level
Warning
Description
Maximum RAM usage exceeds recommended limit. <number> bytes in use <number> bytes limit.
Source
Nokia M Platform
Level
Warning
Description
Nokia M Platform 2.6.86 (NLib 0.8.552)

Remote device doesn't have enough memory.
errorcode: 58003
Device memory full
errorcode: 47005
CONAPI_errordesc: Device memory full
CONAPI_errorcode: 0x80300001
File: 01 Baroquest.m4a
SourcePath: C:\Documents and Settings\Administrator\My Documents\My Music\iTunes\iTunes Music\marian curteanu\De Hominis Dignitate\
TargetPath: E:\Music\marian curteanu\De Hominis Dignitate

Stack trace:
.\MRemoteDataStoreObj.cpp(2189) : CMRemoteDataStore::AddOrUpdate
.\MFileSystemTransferObj.cpp(416) : CMFileSystemTransfer::Send
.\MFileSystemTransferObj.cpp(797) : CMFileSystemTransfer::WorkerProc
.\MFileSystemTransferObj.cpp(793) : CMFileSystemTransfer::WorkerProc
.\MFileSystemTransferObj.cpp(1688) : CMFileSystemTransfer::HandleSend
.\MFileSystemTransferObj.cpp(1655) : CMFileSystemTransfer::HandleSend
.\MFileSystemUtils.cpp(852) : CMFileSystemUtils::CopyFileToPhone
.\MFileSystemUtils.cpp(844) : CMFileSystemUtils::CopyFileToPhone
.\NCONAFileSystem.cpp(254) : CNCONAFileSystem::CopyFileW
.\NCONAFileSystem.cpp(248) : CNCONAFileSystem::CopyFileW
.\NCONAFileSystem.cpp(246) : CNCONAFileSystem::CopyFileW
Source
NOTESProxy
Level
Error
Description
The description for Event ID ( 1 ) in Source ( NOTESProxy ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: NOTES:.
Source
NtApm
Level
Error
Description
The description for Event ID ( 1 ) in Source ( NtApm ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: , 0A.
Source
NTP
Level
Error
Description
<failure>
Source
NUEWizard
Level
Error
Description
The description for Event ID ( 1 ) in Source ( NUEWizard ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description, see Help and Support for details. The following information is part of the event: .
Source
nview_info
Level
Error
Description
The description for Event ID ( 1 ) in Source ( nview_info ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: NVIEW : plusmpix: WAIT_TIMEOUT: (process 0x334) (thread 0xf70) (wait 0x9) (pwait 0x4) WindowManager.cpp 2861
Source
NvStreamSvc
Level
Error
Description
The description for Event ID 1 from source NvStreamSvc cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

NvStreamSvc
Unregistering VAD endpoint [0]
Source
Offline Files
Level
Information
Description
Server '\\server_name' is now offline.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
OMCI
Level
Error
Description
Chassis intrusion detected. This typically does NOT indicate a hardware failure.
1. Contact your Help Desk if you did not personally open your chassis.
2. Enter System Setup & Set Chassis Intrusion to 'Clear'.
Source
OpenRDA
Level
Error
Description
The description for Event ID ( 1 ) in Source ( OpenRDA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
OtMan4
Level
Information
Description
Open Transaction Manager (tm) version 1.11 build 148

Copyright (c) 1996-99 Columbia Data Products, Inc.  All Rights Reserved!
Source
Outlook Mobile Access
Level
Error
Description
Internal Error in Module: MIS OMA: WML Rendering Module
Error Code: 80070057
Description: The parameter is incorrect.
User: <username>
Host:
Path:
Query String:.
Source
Patchlink Update Agent
Level
Warning
Description
SubAgent:Get TaskList Communications Failure. Open Request Error (<error code>) An error occurred opening request to <URL>.
Source
PC-Doctor
Level
Error
Description
The description for Event ID ( 1 ) in Source ( PC-Doctor ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: (788) Asapi: (08:28:50:6030)(788) Matrix.ModuleImp - Error -- 52 Unable to get information from module due to failed exec.
Source
pNSClient.exe
Level
Error
Description
The description for Event ID ( 1 ) in Source ( pNSClient.exe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Asynchronous socket error 10053.
Source
Program-Compatibility-Assistant
Level
Error
Description
Detecting failures in setup programs (installer)
Source
PxeServices
Level
Error
Description
SOCKET_ERROR: PxeService: Error 0x2740 while binding Socket on Port=4011, IP=0-0-0-0
Source
Removable Storage Service
Level
Error
Description
Unable to auto-configure library unit Changer0.  The current setup of the library unit does not support automatic configuration.  You will either have to modify the current setup of the library to adhere to automatic configuration guidelines (if possible) or manually configure the device.
Source
Retrospect
Level
Error
Description
<description>
Source
RightFax SNMP Agent
Level
Error
Description
The description for Event ID ( 1 ) in Source ( RightFax SNMP Agent ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: This server is not licensed for the RightFax SNMP Agent.
Source
RmaServer
Level
Error
Description
RMA Alert : WindowsMediaMulticast: This Server is not licenced to Multicast the WindowsMedia data types.; For More Information see: (N/A)
Source
rmtdevprt
Level
Error
Description
RemoteDevicePort driver error. Invalid request passed entrypts.c 609 .
Source
RTL8167
Level
Warning
Description
Realtek PCIe GBE Family Controller is disconnected from network.
Source
RTSearch
Level
Error
Description
The description for Event ID ( 1 ) in Source ( RTSearch ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Subtype: FATAL, Module: 'RTSearch', Message: 'Failed to get exclusive lock. Multiple instances of the indexer potentially detected.
Source
RxASA
Level
Error
Description
Fatal error: disk full C:\Program Files\VERITAS\Storage Replicator\Database\rsa.log.
Source
Sentinel
Level
Information
Description
The description for Event ID ( 1 ) in Source ( Sentinel ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: . Data:
0010: f8 0a 00 00 00 00 00 00 .......
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 4e 54 53 49 4c 49 3a 44 NTSILI:D
0030: 72 69 76 65 72 45 6e 74 riverEnt
0038: 72 79 3a 73 79 73 4e 75 ry:sysNu
0040: 6d 4f 66 44 65 76 69 63 mOfDevic
0048: 65 73 00es.
Source
sermouse
Level
Error
Description
The description for Event ID ( 1 ) in Source ( sermouse ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Data:
0000: 00 00 00 00 01 00 5a 00   ......Z.
0008: 00 00 00 00 01 00 00 c0   .......
0010: 00 00 00 00 01 00 00 c0   .......
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
Source
ServerStatusReports
Level
Error
Description
Server Status Report:
URL: <URL>
Error Message: <error message>.
Stack Trace: at usage.globalFn.connectDataSource(Boolean pingFirst)
   at usage.frmPerf.renderReportWorker()
   at usage.frmPerf.renderReport().
Source
Service Optimization
Level
Error
Description
The description for Event ID ( 1 ) in Source ( Service Optimization ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
Siebel Analytics Web 7.8
Level
Error
Description
Could not save catalog to D:/sea752/SiebelAnalyticsData/web/catalog/SiebelAnalytics.webcat.01.autosave.
Source
SimpTcp
Level
Warning
Description
The Simple TCP/IP Services could not find the TCP Echo port. The TCP Echo service was not started.
Source
SNMP Informant
Level
Warning
Description
SNMP Informant Standard Argument = \LogicalDisk(_Total)\LogicalDisk ErrorMessage = w????? ErrorNumber = c0000bb9 Function = PdhValidatePathW
Source
snort
Level
Information
Description
[1:466:1] ICMP L3retriever Ping [Classification: Attempted Information Leak] [Priority: 2]: {ICMP} <IP> -> <IP>.
Source
SQLANYs Images
Level
Error
Description
An engine with that name has already started  
Source
SQLBrowser
Level
Error
Description
The SQL configuration for SQL is inaccessible or invalid.
Source
SQLVDI
Level
Error
Description
SQLVDI: Loc=<loc> Desc=<desc> ErrorCode=(<error code>)<error description>. Process=<process number>. Thread=<thread number>. Client. Thread=<server instance>. VD=<vd>.
Source
sr
Level
Error
Description
The System Restore filter encountered the unexpected error "<error code>" while processing the file "<file name>" on the volume "<volume name>". It has stopped monitoring the volume.
Source
statsmng.exe
Level
Error
Description
Execute C:\Program Files\Urchin\util\uconf-export.exe -f C:\Program Files\SWsoft\Plesk\admin\db\tmpF.tmp failed: Usage: uconf-export [-f file] Execute file name: C:\Program Files\SWsoft\Plesk\admin\bin\statsmng.exe
Source
SUA
Level
Error
Description
The description for Event ID ( 1 ) in Source ( SUA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Source
TabletServicePen
Level
Error
Description
The description for Event ID 1 from source TabletServicePen cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer the display information had to be saved with the event.

The following information was included with the event:

Prefs: Failed to get user path

the message resource is present but the message is not found in the string/message table
Source
ThinPrint
Level
Error
Description
Timeout: Connection reset by peer.

(Printer: LP401#cgw_zd:22 Port: ThinPort: Error in function no. 3 Error no.: 8020ea65).
Source
TimeSync
Level
Error
Description
Difference between local clock and remote time was -28902360 milliseconds. Time was not set.
Source
TMS
Level
Error
Description
The description for Event ID ( 1 ) in Source ( TMS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: [0] .
Source
True Vector Engine
Level
Error
Description
The description for Event ID ( 1 ) in Source ( True Vector Engine ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
True Vector Service
Level
Error
Description
The description for Event ID ( 1 ) in Source ( True Vector Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: . Data:
Source
TrustMonitor
Level
Information
Description
The TrustMon MOF file was successfully compiled into the WMI repository.
Source
UAC
Level
Error
Description
The process failed to handle ERROR_ELEVATION_REQUIRED during the creation of a child process.
Source
UPService
Level
Error
Description
UPService: PDH FAILED -- Error expanding path: \PhysicalDisk(*)\Disk Bytes/sec error code: 0xc0000bb8
Source
VBRuntime
Level
Error
Description
The VB Application identified by the event source logged this <event description>
Source
VCSComm
Level
Error
Description
VCSCOMM error: lltconfig -c LLT:lltconfig:15045: set-node failed: cannot lookup "<virtual exchange server name>".
Source
VDS Basic Provider
Level
Error
Description
Unexpected failure. Error code: <error code>.
Source
VDS Basic Provider 1.0
Level
Error
Description
Unexpected failure. Error code: 80000002@01040008.
Source
Virtual Disk Service
Level
Error
Description
Unexpected Failure.
Source
Virtual Server
Level
Information
Description
The setting "Bus/BusType0/Bus0/Device0/Location" for the configuration "Windows 2003 Server" was changed from NULL to ".\Windows 2003 Server.vhd" by "<machine>\<user>".
Source
Visual Studio - VsTemplate
Level
Warning
Description
One or more Visual Studio templates do not match any installed project packages.
Source
VMnetDHCP
Level
Warning
Description
dispatch: Timeout waiting for input data.
Source
VMnetuserif
Level
Information
Description
() Starting up the User Interface Driver for VMware Virtual Networks.
Source
VolSnap
Level
Error
Description
The shadow copy of volume <volume> could not create a diff area file on volume <volume>.
Source
VsrFsRec
Level
Error
Description
The description for Event ID ( 1 ) in Source ( VsrFsRec ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event:  \Driver\VsrFsRec SF:AttachDevByPtr FAILED.
Source
VSS
Level
Error
Description
Volume Shadow Copy Service initialization error: the control dispatcher cannot be started [0x80070427].
Source
VSSNBK
Level
Information
Description
HclEvt VSSNBK (0)  registered init 1462396591 for *
HclEvt VSSNBK (1)  started backup *
HclEvt VSSNBK (4)  info get writerinfo
HclEvt VSSNBK (2)  success finished *
HclEvt VSSNBK (3)  terminate(0) : done with *
Source
VxSvc_Alert
Level
Error
Description
vmnt provider reported physical disk <drive> failure.
Source
vzcore
Level
Error
Description
The description for Event ID ( 1 ) in Source ( vzcore ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: , VPS=777 Driver=NetBIOS DriverEntry failed C0000001.
Source
W2gtcc
Level
Error
Description
The description for Event ID ( 1 ) in Source ( W2gtcc ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
W2gtmu
Level
Error
Description
The description for Event ID ( 1 ) in Source ( W2gtmu ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Data:
0000: 00 00 00 00 01 00 56 00   ......V.
0008: 00 00 00 00 01 00 00 c0   .......
0010: 00 00 00 00 01 00 00 c0   .......
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
Source
W32Time
Level
Information
Description
Registry LanmanServer\Parameters\timesource is not set, maybe it should be
Source
W32Time
Level
Error
Description
The Application Experience Lookup service failed to initialize.
Source
WebClassRuntime
Level
Error
Description
The WebClass runtime trapped the following error Source: wcls_pr_Welcome Thread ID: 1884 Description: Application-defined or object-defined error
Source
wecsvc
Level
Warning
Description
The Subscription WSManSelRg could not be activated on target machine localhost due to a reachability error. Error Code is 0x0. All retries have been performed before reaching this point and so the subscription will remain inactive on this target until subscription is resubmitted / reset.
Source
WhamTech
Level
Error
Description
Open File Error for file C:\THUNDER\DWIN.INI; Status 87; The parameter is incorrect.
Source
WinRT
Level
Error
Description
The description for Event ID ( 1 ) in Source ( WinRT ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event:  Parameters C0000008.
Source
WinSock Proxy Client
Level
Error
Description
Application [iexplore.exe]. Authentication was rejected by WinSock Proxy Server. Check the credentials for the account that is used for the process.
Source
WinVNC4
Level
Error
Description
SocketManager: unknown network event for listener
Source
WSH
Level
Error
Description
Error Source: PatchLink Update Replication - Reports

The following error occured while attempting to retreive data from the PLUS host:

Internal Source: plLoadXML - Analyze HTTP response
Error Number: 500
Error Description: Internal Server Error
Target URL: <URL>

The PatchLink Replication Engine will attempt to continue processing, however this may result in subsequent errors being generated which will halt the replication process.
Source
Yosemite Backup
Level
Error
Description
Event ID 1 - Error 4020: Element full.
Source
ZyTimerService
Level
Warning
Description
TP:Service thread not responding. Last error was <error code>

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...