Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000

Source
.NET Runtime 2.0 Error Reporting
Level
Error
Description
Faulting application <application name> version <application version> stamp 42435be1 faulting module <module name> version 0.0.0.0 stamp 00000000 debug 0 fault address 0x001f0001.
Source
.NET Runtime Error
Level
Error
Description
.NET Runtime Failed to load - 3GB address space not supported
Source
Age of Empires 3
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Age of Empires 3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: age3.exe; 4.105.919.3236; age3.exe; 4.105.919.3236; 00013caf.
Source
Application Error
Level
Error
Description
Faulting application <application name>, version <version number>, faulting module <module name>, version <version number>, fault address <hex address>.
Source
ASP.NET 1.1.4322.0
Level
Error
Description
aspnet_wp.exe (PID: 2576) stopped unexpectedly.
Source
C:\Windows\System32\Inetsrv\W3wp.exe
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( c:\windows\system32\inetsrv\w3wp.exe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: w3wp.exe, 6.0.3790.1830, 42435be1, crmobjectmodel.dll, 3.0.5300.0, 4360a298, 0, 003c7c3c.
Source
CLTMGR
Level
Error
Description
The server was not able to initialize the Client Management virtual driver (Error 13)
Source
ClusSvc
Level
Error
Description
Microsoft Clustering Service suffered an unexpected fatal error at line '<line>' of source module '<source path>'. The error code was '<error code>'.
Source
CluSvc
Level
Error
Description
Microsoft Clustering Service suffered an unexpected fatal error at line 1366 of source module D:\nt\private\cluster\service\dm\dminit.c. The error code was <error code>.
Source
Communicator
Level
Warning
Description
Communicator failed in an unexpected way. More information is contained in the following technical data: errorId="<error id>";reason="<reason>";source="<source>";Domain="<domain>";PeerServer="<server>"
Resolution: If this error continues to occur, please contact your network administrator. The network administrator can use a tool like winerror.exe from the Windows Resource Kit or lcserror.exe from the Office Communications Server Resource Kit in order to interpret any error code listed above.
Source
DCOM
Level
Error
Description
Unable to start a DCOM Server: {<DCOM server GUID>}. The error:
"<error description>"
Happened while starting this command:
<command>
Source
DefaultDomain
Level
Error
Description
Could not create menus

System.NullReferenceException: Object reference not set to an instance of an object.
   at SpecopsSoft.AducExtension.SpecopsAducMenuExtensionBase.GetAllMenuItems()
   at SpecopsSoft.AducExtension.SpecopsAducMenuExtensionBase.SpecopsSoft.AducExtension.IContextMenu.QueryContextMenu(UInt32 hMenu UInt32 iMenu Int32 idCmdFirst UInt32 idCmdLast UInt32 uFlags)
Source
Dexterity
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Dexterity ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: dynamics.exe 8.0.0.69 416f04d6 qb2blx.dll 2.1.0.0 417fb1d2 1 00015dc8.
Source
Dhcp
Level
Error
Description
Your computer has lost the lease to its IP address <IP address> on the Network Card with network address <MAC address>.
Source
DNS
Level
Error
Description
The DNS server could not open the file <file name>. Check that the file exists in the %SystemRoot%\\System32\\Dns directory and that it contains valid data. For the specific error code, you can click the Record Data tab.
Source
Domain Time Server
Level
Error
Description
Domain Time Server version 3.1.b.20031120R
Copyright © 1995-2003 Greyware Automation Products Inc.
Service started successfully.
Source
dsrestor
Level
Information
Description
The DSRestore filter started successfully.
Source
Dynamics Client
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Dynamics Client ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
EvntAgnt
Level
Error
Description
Error opening registry for Parameter information defaults used for all parameters. Return code from RegOpenKeyEx is 2.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
EXPROX
Level
Error
Description
Microsoft Exchange Server has detected that NTLM-based authentication is presently being used between this server and server "<server>". NTLM is  still a secure authentication mechanism and protects users' credentials. However this indicates that there may be a configuration issue preventing  the use of Kerberos authentication. If this condition persists please verify that both this server and server "<server>" are properly configured to use Kerberos authentication. After applying any  changes it may be necessary to restart Internet Information Services on both  the front-end and back-end servers.
Source
Front Page 3.0
Level
Error
Description
Microsoft FrontPage server extensions: unexpected C++ exception: [INDEX] Index(0) out of range [0->4294967295]
Source
Frontpage 2000
Level
Warning
Description
Error <error number> Message: <description>
Source
FrontPage 4.0
Level
Warning
Description
Microsoft FrontPage Server Extensions: <error> Message: <error message>
Source
FrontPage 5.0
Level
Warning
Description
Microsoft FrontPage Server Extensions: - Error <error code> Message: <error message>
Source
FTPCtrs
Level
Error
Description
Unable to collect the FTP performance statistics. The error code returned by the service is data DWORD 0.
Source
Gemini Installer
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Gemini Installer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
IISInfoCtrs
Level
Error
Description
Unable to open the Performance sub key of the IIS Info Service. The error code returned by the registry is data DWORD 0.
Source
Interactive Services detection
Level
Error
Description
A device or program has requested attention. Device or application: C:\Windows\System32\spoolsv.exe. Message title: \\<servername>\HP Universal Printing PCL 5 (v5.1) (redirected 2),LocalsplOnly Document Properties.
Source
JetConv
Level
Information
Description
The Jet Conversion utility has converted the database for the "WINS" service, database file in "c:\winnt\system32\wins\wins.mdb". The backup files of the old (pre-conversion) database have not been removed from "c:\winsbackup". This directory can be cleaned up to free up disk space.
Source
LDM
Level
Error
Description
<error description>
Source
LoadPerf
Level
Information
Description
Performance counters for the <service name> service were loaded successfully. The Record Data contains the new index values assigned to this service.
Source
McLogEvent
Level
Error
Description
Task Manager : Error opening or creating log file
Source
Messenger
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Messenger ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: msnmsgr.exe 7.0.777.0 unknown 0.0.0.0 00000000.
Source
MetaframeEvents
Level
Error
Description
User:<user1> (<computer1>:Session <number1>) has requested to shadow user:<user2> (<computer2>:Session <number2>).
Source
Microsoft (R) Visual Basic Compiler
Level
Error
Description
Faulting application devenv.exe, version 8.0.50727.42, stamp 4333e699, faulting module msvb7.dll, version 8.0.50727.42, stamp 4333e976, debug? 0, fault address 0x00131828.
Source
Microsoft AutoRoute
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft AutoRoute ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages
from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: autorout.exe 13.0.9.100 autorout.exe 13.0.9.100 002fa93b.
Source
Microsoft Business Solutions-Navision
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft Business Solutions-Navision ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: finsql.exe 3.70.1.16172 403bfd3f unknown 0.0.0.0 00000000 0 00000000.
Source
Microsoft Development Environment
Level
Error
Description
Faulting application devenv.exe, version <version>, faulting module <module>, version <version>, fault address <address>.
Source
Microsoft Exchange Server
Level
Error
Description
Faulting application <application>, version <version>, stamp <stamp>, faulting module <dll>, version <version>, stamp <stamp>, debug? 0, fault address <address>.
Source
Microsoft Flight Simulator 9.0
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft Flight Simulator 9.0 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: fs9.exe, 9.0.0.30612, unknown, 0.0.0.0, c9d071f0.
Source
Microsoft IntelliType Pro
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft IntelliType Pro ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: type32.exe, 2.30.544.0, type32.dll, 2.30.544.0, 0000ae3e.
Source
Microsoft Internet Explorer
Level
Error
Description
Faulting application iexplore.exe, version <version>, faulting module <module>, version <module version>, fault address <address>.
Source
Microsoft ISA Server 2004
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Source
Microsoft ISA Server 2006
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Source
Microsoft Management Console
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft Management Console ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: mmc.exe 5.2.3790.3959 kernel32.dll 5.2.3790.4062 000000000000dd10.
Source
Microsoft Office 10
Level
Error
Description
Faulting application <application exe>, version <application version>, faulting module <dll module>, version <dll module>, fault address <memory address>.
Source
Microsoft Office 11
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Source
Microsoft Office 12
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Source
Microsoft Office 14
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module version> stamp <stamp> debug 0 fault address <fault address>.
Source
Microsoft Operations Manager
Level
Error
Description
Faulting application momservice.exe, version 5.0.2749.0, stamp 411d1d01, faulting module momdbconnector.dll, version 5.0.2749.0, stamp 411d1d1a, debug? 0, fault address 0x000ab79c.
Source
Microsoft Security Client
Level
Information
Description
Microsoft Security Client successfully applied security policy: "<policy name>".
Source
Microsoft Virtual PC 2004
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Microsoft Virtual PC 2004 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: virtual pc.exe 5.3.0.582 virtual pc.exe 5.3.0.582 0005a6eb.
Source
Microsoft.Dynamics.Framework.Portal
Level
Error
Description
An unexpected error has occurred.

The  cube either does not exist or has not been processed.

Microsoft.AnalysisServices.AdomdClient.AdomdErrorResponseException
   at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.XmlaClientProvider.
Microsoft.AnalysisServices.AdomdClient.IExecuteProvider.ExecuteMultidimensional(ICommandContentProvider contentProvider AdomdPropertyCollection commandProperties
IDataParameterCollection parameters)
   at Microsoft.AnalysisServices.AdomdClient.AdomdCommand.ExecuteCellSet()
   at Microsoft.Dynamics.Framework.Portal.UI.WebControls.WebParts.CubeHelper.GetCurrencyCodeCompany(String company AdomdConnection conn)
   at Microsoft.Dynamics.Framework.Portal.UI.WebControls.WebParts.BusinessOverviewWebPart.CreateMainTable()
   at Microsoft.Dynamics.Framework.Portal.UI.WebControls.WebParts.BusinessOverviewWebPart.RaiseCallbackEvent(String eventArgument)

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
MicrosoftOffice10
Level
Error
Description
Faulting application <application exe>, version <application version>, faulting module <dll module>, version <dll module>, fault address <memory address>.
Source
Microsoft-Windows-DHCP-Server
Level
Error
Description
The DHCP service received the unknown option <option>, with a length of <length>. The raw option data is given below.
Source
Microsoft-Windows-LoadPerf
Level
Information
Description
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.
Source
MRTG
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( MRTG ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: <error details>.
Source
MSExchangeDS
Level
Information
Description
Microsoft Exchange Directory Service is starting. Microsoft Exchange Server System Attendant, service startup complete, version 6.0 (build 4417.0).

For more information, click http://www.microsoft.com/contentredirect.asp.
Source
MSExchangeES
Level
Information
Description
Microsoft Exchange Event Service is starting. Microsoft Exchange Server Event, service startup complete, version 6.0 (build 4417.0).

For more information, click http://www.microsoft.com/contentredirect.asp.
Source
MSExchangeIMC
Level
Information
Description
Microsoft Exchange Internet Mail Connector Service is starting. Microsoft Exchange Server Internet Mail Connector, service startup complete, version 6.0 (build 4417.0).
Source
MSExchangeIS
Level
Information
Description
Attempting to start the Microsoft Exchange Information Store "<name>".
Source
MSExchangeSA
Level
Information
Description
Microsoft Exchange System Attendant is starting. Microsoft Exchange Server System Attendant, service startup complete, version 6.0 (build 4417.0).
Source
MSExchangeSetup
Level
Information
Description
The description for Event ID ( 1000 ) in Source ( MSExchangeSetup ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.
Source
MsiInstaller
Level
Error
Description
Product: <product name> -- Error <error code> <error description>
Source
MsiInstaller
Level
Error
Description
Failed to connect to server. Error: <error code>
Source
MsiInstaller
Level
Information
Description
Product: <product> -- Installation operation completed successfully.
Source
MSN Error Reporting
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( MSN Error Reporting ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
Norton Disk Doctor
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Norton Disk Doctor) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Norton Disk Doctor - Testing Drive <drive>: Usn Journal verification completed.
Source
NTDS General
Level
Information
Description
Microsoft Directory startup complete, Version 5.00.2195.3719
Source
Operations Manager
Level
Error
Description
AD Lost And Found Object Count : The script 'AD Lost And Found Object Count' failed to create object 'McActiveDir.ActiveDirectory'. This is an unexpected error. The error returned was 'ActiveX component can't create object' (0x1AD)
Source
ORFilter
Level
Error
Description
Error connecting to pipe \\.\pipe\Connect . Internal error: <error code>.
Source
PerfDisk
Level
Error
Description
Unable to open the Disk performance object. Status code returned is data DWORD 0.
Source
Perflib
Level
Error
Description
Access to performance data was denied to <user name> as attempted from <calling module name>.
Source
PerfOS
Level
Error
Description
Unable to open the object. Status code returned is data DWORD 0.
Source
POP3 Connector
Level
Error
Description
CreateEvent(ServiceStop) Error: <error>.
Source
Save Dump
Level
Error
Description
The computer has rebooted from a bugcheck. The bugcheck was: <bugcheck code> (<bugcheck details>). Microsoft Windows NT [v15.1381]. A full dump was not saved.
Source
SharePoint Portal Server Error Reporting
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <version> stamp <stamp> debug <value> fault address <address>.
Source
SourcePH
Level
Error
Description
Faulting application Cscript.exe, version <version>, faulting module <module>, version <version>, fault address <address>.
Source
TermService
Level
Warning
Description
Unable to acquire a license for user <user name>, domain <domain name>.
Source
Userenv
Level
Error
Description
Windows cannot load the locally stored profile. Contact your network administrator.

DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot unload your registry class file. If you have a roaming profile, your settings are not replicated. Contact your administrator.

DETAIL Access is denied. , Build number ((2195)).
Source
Userenv
Level
Error
Description
Your roaming profile is not available, the operating system is attempting to log you on with your local profile. (<error code>)
Source
Userenv
Level
Error
Description
Windows cannot search for Organizational Unit hierarchy with (<error code>).
Source
Userenv
Level
Error
Description
Failed to access the registry information at \\domain.com\SysVol\domain.com\Policies\(Guid Number for Policy)\Machine\registry.pol with 53.
Source
Userenv
Level
Error
Description
The logged on user's forest is different from the machine's forest. Cross Forest Group Policy processing is disabled and loopback processing has been enforced in this forest for this user account.
Source
Userenv
Level
Error
Description
Attempt to determine whether user and machine accounts are in the same forest failed (<error code>).
Source
Userenv
Level
Error
Description
RegLoadKey failed. Return value: <error details>.
Source
Userenv
Level
Error
Description
The operating system was unable to load the locally stored profile. A new local profile will be created. (<error code>).
Source
Userenv
Level
Error
Description
Windows cannot load your profile. Please increase the registry size and restart the computer.
Source
Userenv
Level
Error
Description
Windows cannot do loopback processing when the computer is joined to a downlevel domain or is a member of a workgroup. Loopback processing will be disabled.
Source
Userenv
Level
Error
Description
Windows cannot read the history of GPOs from the registry
Source
Userenv
Level
Error
Description
Windows cannot obtain the domain controller name for your computer network. Return value (<error code>).
Source
Userenv
Level
Information
Description
Windows could not save the registry settings in your user profile on its first try because another program or service was editing them. Windows tried again and saved them after <number> attempts.
Source
Userenv
Level
Error
Description
Windows cannot load extension <file name> with (<error number>).
Source
Userenv
Level
Error
Description
Windows cannot load the user's profile but has logged you on with the default profile for the system.

DETAIL - <error description>
Source
Userenv
Level
Error
Description
Windows cannot update your roaming profile. Contact your network administrator. DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot copy your profile because it contains encrypted files or directories. The keys to decrypt the files or directories are also stored in the profile and are not available now. Please decrypt the files and try again.
Source
Userenv
Level
Error
Description
Windows cannot log you on because the profile cannot be loaded.  Contact your network administrator. DETAIL - <details>.
Source
Userenv
Level
Error
Description
Windows cannot access the registry information at \\mydomain.com\sysvol\mydomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (<error code>).
Source
Userenv
Level
Warning
Description
Windows cannot copy file <path to source file> to location <path to destination file>. Contact your network administrator. DETAIL - <detail description>
Source
Userenv
Level
Error
Description
Windows cannot establish a connection to <domain name> with (<error code>).
Source
Userenv
Level
Error
Description
Your profile was not successfully loaded, but you have been logged on with the default system profile. Please correct the problem and log off. (<error code>)
Source
Userenv
Level
Error
Description
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by this policy engine.
Source
Userenv
Level
Error
Description
Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator. DETAIL - Access is denied. , Build number ((2195)).
Source
Userenv
Level
Error
Description
The Group Policy client-side extension <extension name> was passed flags (<number flags>) and returned a failure status code of (<status code>).
Source
Userenv
Level
Error
Description
Windows cannot determine the user or computer name. Return value (<return error code>).
Source
Userenv
Level
Error
Description
Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
Source
Userenv
Level
Error
Description
Windows can not create profile directory \\<path to profile> You will be logged on with a local profile only. Changes to this profile will not be propagated to the server. Contact your network administrator. Detail: The system can not find the file specified.
Source
Userenv
Level
Error
Description
Windows cannot query DllName registry entry for {GUID}.
Source
Userenv
Level
Error
Description
Windows ended GPO processing because the computer shut down or the user logged off.
Source
Userenv
Level
Error
Description
Insufficient system resources exist to complete the requested service for C:\Documents and Settings\ntuser.dat.
Source
Userenv
Level
Error
Description
Windows has backed up this user's profile. Windows will automatically try to use the backed up profile the next time this user logs on.
Source
Userenv
Level
Error
Description
Windows did not load your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you logoff. Windows did not load your profile because a server copy of the profile folder already exists that does not have the correct security. Either the current user or the Administrator's group must be the owner of the folder. Contact your network administrator.
Source
Userenv
Level
Error
Description
Windows cannot claim critical section. Return value(8).
Source
Userenv
Level
Error
Description
Windows cannot access the file gpt.ini for GPO <cn={0F5174F0-C67B-49B6-8AE2-400AF8923F2A},cn=policies,cn=system,DC=company,DC=NET. The file must be present at the location <\\Company.NET\sysvol\company.NET\Policies\{0F5174F0-C67B-49B6-8AE2-400AF8923F2A}\gpt.ini>. (Access is denied.). Group Policy processing aborted.
Source
Userenv
Level
Error
Description
Windows cannot create a temporary profile directory. Contact your network administrator.

DETAIL - <error message>.
Source
Userenv
Level
Error
Description
Windows cannot process extension <extension> ProcessGroupPolicy. Return value (<error code>).
Source
Userenv
Level
Error
Description
You do not have permission to access your central profile located at <path>. Contact your network administrator.
Source
Userinit
Level
Error
Description
Windows could not execute <file name> due to the following error: The system cannot find the file specified.
Source
vmauthd
Level
Error
Description
The description for Event ID 1000 from source vmauthd cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

2012-01-14T20:05:33.197+05:00| vthread-6| I120: Service Started.

the message resource is present but the message is not found in the string/message table
Source
VMware NAT Service
Level
Information
Description
Using configuration file: <file>.
IP address: <IP address>
Subnet: <subnet mask>
External IP address: <IP address>
Device: vmnet<value>.
MAC address: <MAC address>.
Ignoring host MAC address: <MAC address>.
Source
VMware Tools
Level
Warning
Description
[ warning] [vmusr:vmusr] <error description>
Source
VMware VirtualCenter Server
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( VMware VirtualCenter Server ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: Error getting configuration info from the database.
Source
VMware VirtualCenter Service
Level
Error
Description
[<PID>] [VpxdInvtId] Assigning UUID to a running VM (/rmt/v1/#10.10.54.21/vm/#eee88ce103187712/).
Source
W3Ctrs
Level
Error
Description
Unable to open the Performance sub key of the HTTP (W3) Service. The error code returned by the registry is data DWORD 0.
Source
Windows Live Messenger
Level
Error
Description
The description for Event ID ( 1000 ) in Source ( Windows Live Messenger ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: msnmsgr.exe 8.1.178.0 45b12d6a rpcrt4.dll 5.1.2600.2180 411096ae 0 000088a4.
Source
Windows Product Activation
Level
Error
Description
An error occurred while the wizard was checking the current Windows product license. Error Code: <error code>.
Source
Windows Script Host
Level
Failure Audit
Description
Attempt to execute Windows Script Host while it is disabled.
Source
Windows SharePoint Services 2.0
Level
Error
Description
#50070: Unable to connect to the database <database name>. Check the database connection information and make sure that the database server is running.
Source
Windows SharePoint Services 2.0 Error Reporting
Level
Error
Description
Faulting application <application> version <version> stamp <stamp> faulting module <module> version <module> stamp <stamp> debug <value> fault address <address>.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...