Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 2004

Source
DFSR
Level
Error
Description
The DFS Replication service stopped replication on volume <drive letter>. This failure can occur because the disk is full, the disk is failing, or a quota limit has been reached. This can also occur if the DFS Replication service encountered errors while attempting to stage files for a replicated folder on this volume.

Additional Information:
Error: 9014 (Database failure)
Volume: <GUID>
Source
ESE
Level
Error
Description
<process> (<PID>) Shadow copy <value> time-out (<value> ms).
Source
ESENT
Level
Error
Description
<process> (<PID>) Shadow copy <value> time-out (<value> ms).
Source
Group Policy Management
Level
Error
Description
Backup of GPO failed. Error [Class not registered].
Source
LPR Print Monitor
Level
Warning
Description
Printer <printer name> on host <ip address> is rejecting our request. Will retry until it accepts the request or the job is cancelled by the user.
Source
Microsoft-Windows-Resource-Exhaustion-Detector
Level
Warning
Description
Windows successfully diagnosed a low virtual memory condition. The following programs consumed the most virtual memory: <program> (<PID>) consumed <value> bytes, <program> (<PID>) consumed <value> bytes, and <program> (<PID>) consumed <value> bytes.
Source
MSExchangeIS
Level
Information
Description
There are no messages ready to transfer out (send) for gateway <name>. The transfer out thread is sleeping.
Source
MSExchangeIS Private
Level
Information
Description
There are no messages ready to transfer out (send) for gateway <name>. The transfer out thread is sleeping.
Source
MSExchangeMTA
Level
Warning
Description
Attempted to log an unknown event/error. Product identifier 0, Event/error code <error code> [BASE TCP/IP DRVR 8 0] (14).
Source
PerfNet
Level
Error
Description
Unable to open the Server service. Server performance data  will not be returned. Error code returned is in data DWORD 0.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 34 00 00 c0
Source
SysmonLog
Level
Warning
Description
The service was unable to open the log file: D:\PerfLogs\PWSSCASW2KS_060213.csv for log PWSSCASW2KS and will be stopped. Check the log folder for existence, spelling and permissions or reenter the log file name using the configuration program. This log will not be started. The error returned is: <error description>.
Data: 0000: 800007d3
Source
usbperf
Level
Error
Description
Usbperf data collection failed. Collect function called with usupported Query Type.
Source
WBLOGSVC
Level
Error
Description
The description for Event ID ( 2004 ) in Source ( WBLOGSVC ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event:.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...