Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 11

Source
4mmdat
Level
Error
Description
The driver detected a controller error on \Device\Tape0
Source
a320raid
Level
Error
Description
The driver detected a controller error on \Device\Scsi\a320raid2.
Source
aac
Level
Error
Description
The driver detected a controller error on \Device\Scsi\aac1.
Source
ACPI
Level
Error
Description
GPE: ACPI BIOS is trying to reference a GPE Index (13) when there are no GPE blocks defined by the BIOS. Please contact your system vendor for technical assistance.
Source
ADIC1000
Level
Error
Description
The description for Event ID ( 11 ) in Source ( ADIC1000 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: \Device\MediumChanger0.
Source
AdmPwd
Level
Information
Description
It is not necessary to change password yet. Days to change: 30.
Source
adpu160m
Level
Error
Description
The driver detected a controller error on \Device\Scsi\adpu160m1
Source
adpu320
Level
Error
Description
The driver detected a controller error on \Device\Scsi\adpu3201.
Source
aic78u2
Level
Error
Description
The driver detected a controller error on \Device\ScsiPort1
Source
aic78xx
Level
Error
Description
The driver detected a controller error on Device\ScsiPortO.
Source
aic79xx
Level
Error
Description
The driver detected a controller error on Device\ScsiPort0.
Source
arcsas
Level
Error
Description
The driver detected a controller error on \Device\RaidPort0.
Source
asa72xx
Level
Error
Description
The driver detected a controller error on \Device\Scsi\asa72xx1.
Source
asc3550
Level
Error
Description
The driver detected a controller error on \Device\Scsi\asc35501.
Source
atapi
Level
Error
Description
The driver detected a controller error on \Device\Ide\IdePort0.
Source
b57w2k
Level
Information
Description
Broadcom NetXtreme 57xx Gigabit Controller: Network controller configured for 1Gb full-duplex link.
Source
BENCHMRK
Level
Error
Description
The description for Event ID ( 11 ) in Source ( BENCHMRK ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: \Device\MediumChanger0.
Source
bp32drv4
Level
Error
Description
The description for Event ID ( 11 ) in Source ( bp32drv4 ) could not be found. It contains the following insertion string(s): .

Data:  Words
0000:  0010000f 006a0001 00000000 c004000b
0010:  00000500 00000000 00000000 00000000
0020:  00000000 00000000 00000000 00000000
Source
Buslogic
Level
Error
Description
The driver detected a controller error on \Device\ScsiPort0.
Source
caitw2i
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
CdRom
Level
Error
Description
The driver detected a controller error on \Device\Scsi\CdRom
Source
Cert Server Enterprise Policy
Level
Error
Description
Application: Warning CA was unable to publish the certificate for the Domain\server. Server is not part of the Cert Publishers group. Privilege violation.
Source
Cheyenne InocuLAN
Level
Error
Description
Cheyenne AntiVirus Evaluation period was expired. Please call Cheyenne Software Inc.
Source
codimw2k
Level
Error
Description
The driver detected a controller error on <device>.
Source
Compaq Power Management
Level
Information
Description
communications established with UPS.
Source
cpq32fs2
Level
Error
Description
The driver detected a controller error on \Device\Scsi\cpq32fs21.
Source
cpqcissm
Level
Error
Description
The driver detected a controller error on \Device\Scsi\cpqcissm1.
Source
cpqfcalm
Level
Error
Description
The driver detected a controller error on \Device\Scsi\cpqfcalm2.
Source
crypt32
Level
Error
Description
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: 0x800b0101.
Source
dcesm
Level
Error
Description
The description for Event ID ( 11 ) in Source ( dcesm ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: , Driver could not initialize the ESM device..
Source
ddsmc
Level
Error
Description
The driver detected a controller error on \Device\Changer0.
Source
Disk
Level
Error
Description
The driver detected a controller error on \Device\Harddisk0\DR0
Source
dlttape-VRTS
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
EDB
Level
Information
Description
MSExchangeIS ((7092)) The database engine stopped.
Source
elxstor
Level
Error
Description
The driver detected a controller error on \Device\RaidPort1.
Source
halfinchVRTS
Level
Error
Description
The driver detected a controller error on \Device\Tape1.
Source
hpcisss
Level
Error
Description
Reset to device \Device\RaidPort1 was issued.
Source
hplto
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
hpqdlt
Level
Error
Description
The driver detected a controller error on \Device\Tape3.
Source
i8042prt
Level
Error
Description
The ring buffer that stores incoming keyboard data has overflowed (buffer size is configurable via the registry).
Data:
0000: 00 00 08 00 01 00 62 00   ......b.
0008: 00 00 00 00 0b 00 05 40   .......@
0010: 1e 05 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 0c 00 00 00 b0 04 00 00   .......
Source
iANSMinipor
Level
Warning
Description
Adapter link down: <adapter name>.
Source
Ipxnds
Level
Error
Description
The driver detected a controller error on \device\Scsi\Ipxnds1
Source
Kbdclass
Level
Information
Description
The ring buffer thats stores incoming keyboard data has overflowed (buffer size is configurable via the registry)
Source
KDC
Level
Error
Description
There are multiple accounts with name <object name> of type <object type>.
Source
Kerberos-Key-Distribution-Center
Level
Error
Description
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is MSSQLSvc/domainlocal:57132 (of type DS_SERVICE_PRINCIPAL_NAME). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate entries for MSSQLSvc/domainlocal:57132 in Active Directory.
Source
l2nd
Level
Information
Description
The description for Event ID ( 11 ) in Source ( l2nd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description;\Device\{A4E3D976-CB7C-4E3A-B7F8-E023BF4868DA; \DEVICE\{A4E3D976-CB7C-4.
Source
LanSafe III PM
Level
Information
Description
Communications established with UPS
Source
LanSafe III PM
Level
Information
Description
LanSafe III Power Monitor loaded
Source
Live Communications User Services
Level
Error
Description
Initialize failure. Failed to initialize the Data Store component. Make sure the mssql$rtc service is started.
Source
Local Response Agent
Level
Error
Description
DMI Indication
Event Type = Container Security Breach
component Name = Intel Corporation, Baseboard
Group = Physical Container Global Table
Severity = Critical
Instance 1
System = other
Source
lpxnds
Level
Error
Description
The driver detected a controller error on \Device\Scsi\lpxnds2.

Data:
0000: 0f 00 10 00 01 00 66 00 ......f.
Source
Lsi_fc
Level
Error
Description
The driver detected a controller error on \Device\RaidPort0.
Source
lsi_scsi
Level
Error
Description
The driver detected a controller error on \Device\RaidPort1.
Source
lsi-sas
Level
Error
Description
The driver detected a controller error on \Device\RaidPort0.
Source
Microsoft-Windows-CAPI2
Level
Error
Description
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
Source
Microsoft-Windows-RPC-Events
Level
Error
Description
Possible Memory Leak. Application ("C:\WINDOWS\SYSTEM32\MMC.EXE" "C:\WINDOWS\SYSTEM32\SERVERMANAGER.MSC" ) (PID: 584) has passed a non-NULL pointer to RPC for an [out] parameter marked [allocate(all_nodes)]. [allocate(all_nodes)] parameters are always reallocated; if the original pointer contained the address of valid memory, that memory will be leaked. The call originated on the interface with UUID ({6bffd098-a112-3610-9833-46c3f874532d}), Method number (2). User Action: Contact your application vendor for an updated version of the application.
Source
miniqic
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Data:
0000: 0018000e 00740001 00000000 c004000b
0010: 00000101 c0000185 00000000 00000000
0020: 00000000 00000000 00000000 00000002
0030: 00000000 00000000 0000c402 00045200
Source
Mouclass
Level
Information
Description
The ring Buffer that stores incoming mouse data has overflowed (buffer size is configurable via the registry).
Source
Mouseclass
Level
Error
Description
The ring buffer that stores incoming keyboard data has overflowed (buffer size is configurable via the registry).
Source
mraid2k
Level
Error
Description
The driver detected a controller error on \Device\Scsi\mraid2k1.
Source
mraid35x
Level
Error
Description
The driver detected a controller error on \Device\Scsi\mraid35x2.
Source
MSExchangeES
Level
Error
Description
A fatal error (<error code>) occurred in an IExchangeEventSink while processing message [Subject = "xxx"].
Source
MsiInstaller
Level
Information
Description
Microsoft Office XP Professional with FrontPage -- Installation operation failed.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Source
MSSQLServerOLAPService
Level
Error
Description
An error occurred while writing a trace event to the file <file>.
Source
ndasscsi
Level
Error
Description
The driver detected a controller error on \Device\Scsi\ndasscsi1.
Source
nfrd960
Level
Error
Description
The driver detected a controller error on \Device\Scsi\nfrd9601.
Source
nvraid
Level
Error
Description
The description for Event ID ( 11 ) in Source ( nvraid ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
nvrd32
Level
Error
Description
The driver detected a controller error on .
Source
PlugPlayManager
Level
Error
Description
The device Root\LEGACY_<device name>\0000 disappeared from the system without first being prepared for removal.
Source
ql2200
Level
Error
Description
The driver detected a controller error on \Device\ScsiPort3.
Source
ql2300
Level
Error
Description
The driver detected a controller error on \Device\RaidPort0.
Source
QLTOx32
Level
Error
Description
The driver detected a controller error on \Device\Tape0
Source
QntmDLT
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
Quota
Level
Error
Description
A quota scan on directory "<directory>" on volume "<volume>" failed unexpectedly. Error code: 0xc0000010 The quota usage for the quota on this directory and any parent directories may be incorrect. The affected quotas may not be properly enforced. You can attempt to initiate a new scan using the quota management command line tool. If the problem persists reboot your system.
Source
Serial
Level
Warning
Description
The hardware resources for <COM port> are already in use by another device.
Source
SNA Server
Level
Error
Description
(<PID>) Initialization Failure

EXPLANATION
This is an internal logic error in SNA Server, related to the configuration.
Source
sonysdx-VRTS
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
SpecFrog
Level
Error
Description
The description for Event ID ( 11 ) in Source ( SpecFrog ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: \Device\MediumChanger0.
Source
Spntlog
Level
Error
Description
Real-time scan start error! Return code: 0xF028.
Source
stdatw2k
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
stek9714
Level
Error
Description
The driver detected a controller error on \Device\MediumChanger0.
Source
sym_u3
Level
Error
Description
The driver detected a controller error on \Device\ScsiPort1.
Source
symmpi
Level
Error
Description
The driver detected a controller error on \Device\Scsi\symmpi1.
Source
Tardis
Level
Information
Description
The time has been corrected by 0.111 seconds
Source
TimeServ
Level
Warning
Description
The NTP server didn't respond.
Source
TPM
Level
Error
Description
A buffer overflow was detected.
Source
tratapi-VRTS
Level
Error
Description
The driver detected a controller error on \Device\Tape0.
Source
vmperf
Level
Error
Description
Unable to open Volume Manager's VMStat.Dll to provide performance data for Volume Manager dynamic disks. The statistic module of Volume manager was not loaded.
Source
VPCNetS2
Level
Error
Description
The attempt to unregister the MAC address 00-00-00-00-00-00 failed.
Source
VSS
Level
Error
Description
Volume Shadow Copy Service information: The COM Server with CLSID {<GUID>} and name <name> cannot be started. [<error code>].
Source
w32time
Level
Warning
Description
The NTP server did not respond
Source
wininit
Level
Warning
Description
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
Source
WudfUsbccidDriver
Level
Error
Description
An operation has failed (0x0, 0x0, 0x0, 0x0).
ScT0Transmit: Failed to send request at TPDU level.
HResult: The specified request is not a valid operation for the target device.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...