Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 12293 Source: VSS

Volume Shadow Copy Service error: Error calling a routine on the Shadow Copy Provider {<GUID>}. Routine details <routine> [hr = <error code>].
Error code 0x8000ffff , see the information listed at EV100045.
ME972135 describes a situation when you try to perform a backup on a computer that is running Windows Vista or Windows Server 2008. A hotfix is available.
This error can occur when you use Backup Exec and Acronis True Image on the same server. Read the information on EV100046 and EV100047 to resolve this problem.
This event can occur when the customer exceeded the maximum number of Snapshot copies per volume. See ME924262 for information on solving this problem.
From a newsgroup post: "Based on my research, this issue may appear if you have enabled the Open File Support (OFS) within Tivoli Storage Manager (TSM) Client Version 5.2 or some other third party software (including anti-virus software). Therefore, I would like to suggest that you perform a clean boot or the SBS server and see if the issue persists. To perform a clean boot, follow the steps below:
1. Click Start, click Run, type "msconfig" (without the quotation marks), and click OK.
2. Select "Selective Startup" and remove the check box for "Load Startup Items".
3. On the "Services" tab, click Enable All.
4. Check "Hide all Microsoft Services", click “Disable All”, and clear "Hide all Microsoft Services".
5. Click the OK button and then Click Yes to restart your computer.
6. Try again.
If the issue still occurs, please install the following three hotfixes: ME833167, ME826936, and ME828481.
If the problem is not solved, please run the following command immediately after VSS fails: vssadmin list writers > c:\vss.txt. This will send the output to vss.txt in the root of the C drive. You can check the file for more details on the problem".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.