Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1025

Source
.NET Runtime
Level
Error
Description
Application: TfsMgmt.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFast(string message).
Message: Unrecoverable system error.
Stack:
   at System.Environment.FailFast(System.String)
   at
...
Source
ASP.NET 1.1.4322.0
Level
Information
Description
Finish restarting W3SVC.
Source
DHCP
Level
Warning
Description
The DHCP service was unable to read the BOOTP file table from the registry. The DHCP service will be unable to respond to BOOTP requests that specify the boot file name.
Source
DhcpServer
Level
Warning
Description
The DHCP service was unable to read the BOOTP file table from  the registry. The DHCP service will be unable to respond to BOOTP requests that specify the boot file name.
Source
Internet Explorer
Level
Error
Description
The description for Event ID ( 1025 ) in Source ( Internet Explorer ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
libwsc
Level
Error
Description
The description for Event ID ( 1025 ) in Source ( libwsc ) could not be found. It contains the following insertion string(s): .
Source
MSExchangeAdmin
Level
Error
Description
Unable to read the message tracking directory path from the server object in the Active Directory. Error <error>.
Source
MSExchangeCluster
Level
Error
Description
The Exchange virtual server needs to be upgraded before coming online. From the Cluster Administrator program, select 'Upgrade Exchange Virtual Server' from the resource context menu to upgrade this Virtual Server.
Source
MSExchangeFB
Level
Warning
Description
The unsupported subject Microsoft Schedule+ Free/Busy Connector: That subject is not supported by Microsoft Schedule+. was defined in message Microsoft Schedule+ Free/Busy Connector (Server Name).
Source
MSExchangeIS Mailbox Store
Level
Warning
Description
An error occurred on database "First Storage Group\Mailbox Store (Exchange_Servername)".
Function name or description of problem: <problem description>
Source
MSExchangeIS Private
Level
Warning
Description
An error occurred. Function name of description of problem: <problem>: Error: <error code>
Source
MSExchangeIS Public Store
Level
Warning
Description
An error occurred. Function name or description of problem: <error description>
Source
MSExchangeMU
Level
Error
Description
Failed to rename key from OWA to Webmail under key /LM/W3SVC/1/root. Error code is 80070003 (The system cannot find the path specified.).
Source
MsiInstaller
Level
Information
Description
Product: <product name>. The file <path> is being held in use by the following process Name: <name>, Id <id>.
Source
Reporting
Level
Information
Description
The description for Event ID (1025) in Source (Reporting) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: I1001: Unattended printing of report 'AD DOMAIN CONTROLLER MEMORY CAPACITY PLANNING BY PEAK HOURS' succeeded.
Source
SBCore
Level
Error
Description
The server will be shut down in 60 minutes because an explicit domain trust was found. You must remove this trust relationship to continue using this server. For more information contact Microsoft.
Source
snmpelea
Level
Error
Description
Unable to load PrimaryModule Application. LoadLibrary returned 126.
Source
TN3270 Server
Level
Error
Description
A server certificate was found but was invalid, chain error <error code>.
Source
Userenv
Level
Error
Description
Windows completed processing of Computer Group Policy.
Source
Virtual Server
Level
Information
Description
Virtual Server successfully started.
Source
Virtual Server
Level
Warning
Description
The setting "hardware/bios/time_bytes" for the virtual machine configuration "<virtual machine>" was changed.
Source
W3SVC
Level
Warning
Description
Application pool '<name>' exceeded its job limit settings.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...