Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 17

Source
AppleTalk
Level
Error
Description
Unable to acquire a node on adapter "<adapter name>". Appletalk could not be started on the adapter.
Source
Automatic Updates
Level
Information
Description
Installation Ready: The following updates are downloaded and ready for installation. To install the updates, an administrator should log on to this computer and Windows will prompt with further instructions.
<list of updates>.
Source
avgntdd
Level
Information
Description
The description for Event ID ( 17 ) in Source ( avgntdd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: AVGNTDD successfully loaded.
Source
avipbb
Level
Information
Description
avipbb.sys version 10.0.2.6 successfully loaded
Source
Bigbrotherxymonclient
Level
Warning
Description
The agent externals generated this event message: <error message>
Source
Blfm
Level
Information
Description
Network adapter <adapter name> is de-activated and is no longer participating in network traffic.
Source
BTHUSB
Level
Error
Description
The local Bluetooth adapter has failed in an undetermined manner and will not be used. The driver has been unloaded.
Source
CertSvc
Level
Error
Description
The Certificate Server did not start: Unable to initialize the database connection for <computer name>. The error code is <error code>.
Source
cpqarry2
Level
Error
Description
The driver failed to initialize the device.
Source
i8042prt
Level
Error
Description
The device sent an incorrect response(s) following a keyboard reset.
Source
IAS
Level
Error
Description
An Access-Request message was received from RADIUS client <client> without a message authenticator attribute when a message authenticator attribute is required. Verify the configuration of the RADIUS client in the Internet Authentication Service snap-in (the "Client must always send the message authenticator attribute in the request" checkbox) and the configuration of the network access server.
Source
Innoculate IT
Level
Error
Description
Innoculate IT server reports an internal error . MDAconnect agent() reports an internal error.
Source
InoculateIT Server
Level
Error
Description
The Unauthorized Application virus was detected in D:\FILES\VBSFILE.VBS. Machine: EFJ-DMZ-00. Action: Report Only.
Source
iSQL*Plus Application Server
Level
Error
Description
The description for Event ID ( 17 ) in Source ( iSQL*Plus Application Server ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
Microsoft ISA Firewall H.323 Filter
Level
Error
Description
Registration with the H323 Gatekeeper at address <IP address>:<port> failed. This will prevent inbound calls.
Source
Microsoft-Windows-WHEA-Logger
Level
Warning
Description
A corrected hardware error has occurred.

Component: Memory
Error Source: Corrected Machine Check

Bus : Device:Function: 0x0:0x3:0x0
Vendor ID : Device ID: 0x8086:0x340a
Class Code: 0x30400
Source
mnmsrvc
Level
Information
Description
NetMeeting RDS Service Stop
Source
mpio
Level
Warning
Description
\Device\MPIODisk25 is currently in a degraded state. One or more paths have failed though the process is now complete.
Source
MSExchange RBAC
Level
Error
Description
(Process w3wp.exe PID 10600) "RBAC authorization returns Access Denied for user <doman\username>. Reason: No role assignments associated with the specified user were found on Domain Controller <DCName>"
Source
nv
Level
Error
Description
Vblank Callback Timeout Head 00000000 Count 001b0c1b
Source
OfmLvDrv
Level
Warning
Description
API failed with status 0xc00000a3.
Source
OracleAgent
Level
Error
Description
OracleAgent failed to initialize its connection cache.
Source
Outlook
Level
Information
Description
User canceled request against server (<server name>) after waiting (<number>) ms.
Source
Removable Storage Service
Level
Error
Description
RSM cannot manage library <storage device name>. It encountered an unspecified error. This can be caused by a number of problems including, but not limited to, database corruption, failure communicating with the library, or insufficient system resources.
Source
SNA Server
Level
Error
Description
APPC session activation failure: BIND negative response sent

Sense data  = <data>
Connection  = <connection>
Session ID  = <ID>
LFSID       = <ID>.
Source
TermServLicensing
Level
Warning
Description
One or more Terminal Services Licensing certificates on server SERVER are corrupt. Terminal Services Licensing will only issue temporary licenses until the server is reactivated. See Terminal Services Licensing help topic for more information.
Source
timeserv
Level
Warning
Description
Modem timeout- might be busy.
Source
vagntdd
Level
Error
Description
The description for Event ID ( 17 ) in Source ( vagntdd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: \Device\vagntdd, Started filtering!.
Source
Virtual Disk Service
Level
Error
Description
VDS fails to launch provider <provider>. Error code: <error code>.
Source
VolSnap
Level
Error
Description
An attempt to flush and hold writes on volume <volume> was attempted while another flush and hold was already in progress.
Source
VSS
Level
Error
Description
The EventSystem service is disabled or is attempting to start during Safe Mode. The Volume Shadow Copy service cannot start while in safe mode. If not in safe mode, make sure that EventSystem service is enabled.
CLSID: <CLSID> Name:<name> [<error code>].
Source
W32Time
Level
Error
Description
Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer "time.windows.com,0x1". NtpClient will try the DNS lookup again in 60 minutes. The error was: <error message>. (<error code>)
Source
W32Time
Level
Error
Description
The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time.
Source
Windows Update Agent
Level
Information
Description
Installation Ready: The following updates are downloaded and ready for installation.
To install the updates, an administrator should log on to this computer and Windows will prompt with further instructions:
- Windows Malicious Software Removal Tool - January 2009 (KB890830)
Source
WLBS
Level
Error
Description
WLBS : <error description>

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...