Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1014 Source: DNS Client Events

Level
Description
Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded.
Comments
 
On Windows 10, this may be recorded due to a change on the DNS resolver design implemented with Windows 10. The operating system will try to resolve a name using all the network interfaces, even if some are not connected to the Internet. For this reason, timeouts may be experienced, websites may fail to open and so on. We disabled all but the active interface on one computer and the problem disappeared.
On a Windows 2008 R2 server - Setting STG enabled = FALSE on the switch ports solve my issue.
On Windows Server 2008 R2 I had to enabled "Spanning Tree Portfast" on my servers switch ports.
I fixed this problem by unselecting the TCPI\IPv6 protocol as it is not used on my network/ISP yet.
See T766017 and EV100150 for information related to www.msftncsi.com.


From a Microsoft support forum: "This issue may be more hardware related, however, you may also try the following:
1. If the computers are connecting to a router, please ensure the routerís firmware is up-to-date.
2. Please run the following command in an elevated command prompt in Windows 7:

netsh interface tcp set global rss=disabled
netsh interface tcp set global autotuninglevel=disabled
netsh int ip set global taskoffload=disabled

3. Disable SNP in Windows 7 by setting Registry (please perform a full-system backup first.
) as following:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]
EnableTCPChimney=dword:00000000
EnableTCPA=dword:00000000
EnableRSS=dword:00000000

If the keys do not exist, please create them and assign the value.

An update to turn off default SNP features is available for Windows Server 2003-based and Small Business Server 2003-based computers

4. If the issue persists, please add another network adapter to this computer and see how it works."

Many users reported this issue as being fixed after they applied these recommendations (see the "Windows 7 x64 Network Adapter Stops working on high load link").

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...