Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1002

Source
ACECLIENT
Level
Error
Description
ACE/Server is not responding. Run SDTEST to verify port and IP address of ACE/Server. Make sure ACE/Server process is running.
Source
Application Hang
Level
Error
Description
The program <program name> version <version number> stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel. Process ID: <process ID> Start Time: <time> Termination Time: <time>.
Source
Application Hang
Level
Error
Description
Hanging application <application exe>, version <version>, hang module hungapp, version 0.0.0.0, hang address <hex address>.
Source
BINLSVC
Level
Error
Description
The BINL service is shutting down due to the following error: <error>
Source
Brother BrLog
Level
Warning
Description
STI BrtSTI: [2010/04/23 19:58:00.359]: [00001760]: GetAddressByName: gethostbyname[BRW0C607678EF20] Error[11001]
Source
DFSR
Level
Information
Description
The DFS Replication service is starting.
Source
Dhcp
Level
Error
Description
The IP address lease 192.168.0.2 for the Network Card with network address 0080C6FACA52 has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
Source
DHCP
Level
Error
Description
DHCP received an unknown option 006 of length 007. The raw option data is given below.
Source
DhcpServer
Level
Error
Description
The DHCP service failed to initialize its global parameters.  The following error occurred: <error>.
Source
DPTELOG
Level
Warning
Description
The Disk at (0,0,0,0) returned request sense at <date, time, year>
(Key: Non-Recoverable error).
Source
ESE97
Level
Information
Description
The Microsoft Exchange Server database (EDB) could not be initialized and returned error <error>. Unrecoverable error, the directory can't continue.
Source
HP Wbem Dump
Level
Error
Description
HP WBEM data was captured and compressed as a raw data format.
Original Size=2597313 Compressed Size=45572 WMI Queries=20 WMI Instances=887 WMI Properties=11052 Total Count=1 Log Number=1 Date=10-04-10 Time=13:01:10
Failed class List:
  CIM_ManagedSystemElement
  CIM_StatisticalData
  CIM_Location
  CIM_Capabilities
  CIM_Product
Source
hpmon
Level
Error
Description
OpenAdapter failed with error (0x015E). Make sure the DLC protocol is properly installed.
Source
IBM UniVerse
Level
Error
Description
UniVerse warning: Unable to read from pipe. Win32 error: 109. The pipe has been ended.
Source
Interix
Level
Error
Description
Interix/Posix subsystem status: PSXSS: Startup could not create directory (0xc0000035), exiting.
Source
LoadPerf
Level
Information
Description
Performance counters for the <service name> service are already in Performance Registry no need to re-install again.
Source
Microsoft Antimalware
Level
Warning
Description
Microsoft Antimalware scan has been stopped before completion.
Scan ID: {6445F05C-06F0-48AB-9E05-7823333585CB}
Scan Type: Antimalware
Scan Parameters: Custom Scan
User: AGWIN7\AG
Source
Microsoft-Windows-Dhcp-Client
Level
Error
Description
The IP address lease 192.168.1.110 for the Network Card with network address 001D9213C515 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
Source
MSExchangeDS
Level
Error
Description
The Microsoft Exchange Server database, EDB, could not be initialized and returned error <error>. Unrecoverable error. The directory can't continue.
Source
MSExchangeIS
Level
Error
Description
File <file name> is missing or corrupt. It cannot be used.
Source
MSExchangeMU
Level
Error
Description
Metabase Update agent failed to start. Error code is <error code>.
Source
MSExchangeSetup
Level
Error
Description
Exchange Server component <component> Failed. Error: <error code> - <error details>.
Source
MSExchangeSRS
Level
Error
Description
The Microsoft Exchange Site Replication Service database [EDB] could not be intialized and returned error 1. Unrecoverable error, the site Replication service can't continue.
Source
MSExchangeTransport
Level
Information
Description
Virtual Server <ip address>: RE Server accepted a connection attempt.
Source
MsiInstaller
Level
Error
Description
Unexpected or missing value (name: 'commonToAll', value: '') in key 'HKLM\Products\7A37001281113DF46A9287D1FFEA7A31\Features' For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
NAIMSERV301
Level
Error
Description
ePolicy Orchestrator server failed to initialize.
Source
NAIMSERV350
Level
Error
Description
ePolicy Orchestrator server failed to initialize.
Source
PerfDisk
Level
Error
Description
Unable to allocate a dynamic memory buffer.
Source
PLA
Level
Error
Description
File I/O
Origin: System Overview
Error: <error code>

Delete failed for System Overview - The process cannot access the file "<file>" because it is being used by another process.
Source
POP3 Connector
Level
Information
Description
The service started the shutdown sequence...
Source
POP3SVC
Level
Error
Description
The Microsoft POP3 Service stopped with error code <error code>.
Source
SclgNtfy
Level
Error
Description
Default group policy object cannot be created. Error <error code> to open GPO Domain EFS Recovery Policy in domain LDAP://DC=bitstorm,DC=local.
Source
Siebel
Level
Error
Description
Unexpected exception 0xc0000005: access violation reading from address 0x00000d24 pid 366, tid 344 Call stack: Module: C:\ora81\bin\OraClient8.Dll address: 60493940 (no debug info) address: 6040143A (no debug info) Module: C:\ora81\bin\OCI.dll address: 25E5F17 (no debug info) Module: d:\sea602\siebsrvr\bin\seor815.dll address: 286B69BF (no debug info)  
Source
smtpsvc
Level
Error
Description
Server events initialization failed for virtual server <value>. Server events may not be called for this virtual server.
Source
SUA
Level
Error
Description
The description for Event ID ( 1002 ) in Source ( SUA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:
Source
W3SVC
Level
Error
Description
Application pool "DefaultAppPool" is being automatically disabled due to a series of failures in the process(es) serving that application pool.
Source
Winlogon
Level
Information
Description
The shell stopped unexpectedly and explorer.exe was restarted.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...