Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4

Source
(MSN/Windows) Messenger Service
Level
Information
Description
The description for Event ID ( 4 ) in Source ( (MSN/Windows) Messenger Service ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ˙.
Source
a57w2k
Level
Warning
Description
HP NC7781 Gigabit Server Adapter #2: The network link is down.  Check to make sure the network cable is properly connected.
Source
ACPI
Level
Error
Description
ACPI BIOS is attempting to read from an illegal IO port address (0x71), which lies in the 0x70 - 0x71 protected address range. This could lead to system instability. Please contact your system vendor for technical assistance.
Source
Active Server Pages
Level
Information
Description
Service stopped.
Source
adpu160m
Level
Error
Description
Driver detected an internal error in its data structures for \Device\Scsi\adpu160m3.
Source
adpu320
Level
Error
Description
Driver detected an internal error in its data structures for \Device\Scsi\adpu3201.
Source
alihdd
Level
Error
Description
The description for Event ID ( 4 ) in Source ( alihdd ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
Atapi
Level
Error
Description
Driver detected an internal error in its data structures for.
Source
ati2mpad
Level
Error
Description
You are running different builds of the miniport and display driver. Please use a matched pair.
Source
ati2mtag
Level
Error
Description
You are running different builds of the miniport and display driver. Please use a matched pair.
Source
b57nd60
Level
Error
Description
Broadcom NetLink (TM) Gigabit Ethernet: The network link is down.  Check to make sure the network cable is properly connected.
Source
b57nd60a
Level
Warning
Description
Broadcom NetXtreme Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.
Source
B57NT4
Level
Error
Description
The network link is down. Check to make sure the network cable is properly connected.
Source
b57w2k
Level
Error
Description
Broadcom NetXtreme Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.
Source
bcm4sbxp
Level
Warning
Description
Broadcom 440x 10/100 Integrated Controller: The network link is down.  Check to make sure the network cable is properly connected.
Source
BM
Level
Information
Description
The description for Event ID ( 4 ) in Source ( BM ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
CimNotify
Level
Error
Description
The description for Event ID ( 4 ) in Source ( CimNotify ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: servername.domain.com
Source
Cisco Desktop Call/Chat Service
Level
Error
Description
FCCS2008 Network communication error <COMM_FAILURE> sending message to application <AGENT_DESKTOP_6839>. The application will be logged out.
Source
CiscoUnity_Bellhop
Level
Error
Description
Cisco Unity Bellhop encountered an error: (error):91
(Object variable or With block variable not set)
in procedure ForceMWISyncForGuest of Module modPMSFunctions
Source
Citrix Resource Management
Level
Error
Description
Resource Manager failed to communicate with the Data Store.
Source
cpq32fs2
Level
Error
Description
The driver detected an internal error in its data structures for .
Source
CPQKGPSA
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
dac960nt
Level
Error
Description
Driver detected an internal error in its data structure for .
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp

Data:
Words
0000: 00000000 005a0001 00000000 c0040004
0010: f78aa7a0 c000000c0 00000000 00000000
0020: 00000000 00000000
Source
DB2
Level
Error
Description
An entry has been logged to the DB2 Diagnostic Log for instance DB2. Please refer to this instance's DB2 Diagnostic Log for additional information.
Source
dmboot
Level
Error
Description
dmboot: Failed to encapsulate selected disks.
Source
dmio
Level
Warning
Description
dmio: write error on Plex Volume1-02 of volume Volume<value> offset <offset> length <value>.
Source
E100B
Level
Error
Description
Adapter Intel 8255x-based PCI Ethernet Adapter (10/100): Adapter link down.
Source
ehRecvr
Level
Error
Description
The description for Event ID 4 from source ehRecvr cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Bluebird, WDM TvTuner
80004005

the message resource is present but the message is not found in the string/message table.
Source
EmcPowerPath
Level
Error
Description
The description for Event ID ( 4 ) in Source ( EmcPowerPath ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: EmcAdminSvr could not intitialize PowerPath drivers: LibmpPrepareForRealWork returned FALSE.
Source
EPPSCSIx
Level
Error
Description
The description for Event ID ( 4 ) in Source ( EPPSCSIx ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
fasttrak
Level
Error
Description
Driver detected an internal error in its data structures for \Device\Scsi\fasttrak2.
Source
FRN
Level
Error
Description
The description for Event ID ( 4 ) in Source ( FRN ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
Ftdisk
Level
Error
Description
An error occurred while attempting to recover data from the fault tolerance set containing \Device\Harddisk<number>\Ft3.
Source
ga302nd5
Level
Error
Description
The network link is down. Check to make sure the network cable is properly connected.
Source
hplopts
Level
Error
Description
Exception in Passthrough thread.
Source
iANSMiniport
Level
Error
Description
Unable to bind to physical adapter.
Source
ibmcgbs2k3
Level
Warning
Description
IBM Changer Bus Enumerator received status (NTSTATUS 0xC0000283) on IOCTL 0x0 attempting failover.
Source
ibmtpbs2k3
Level
Warning
Description
IBM Tape Bus Enumerator received status (NTSTATUS 0x8000001B) on IOCTL 0x0. If Data Path Failover is supported and configured failover will be attempted.
Source
IISCTLS
Level
Information
Description
IIS kill command received from user <domain\username>. The logged data is the status code.
Source
IMS Extension
Level
Error
Description
Failed to add text to body because of the following error: <error>.
Source
IntelATA
Level
Error
Description
Driver detect an internal error in its data structures for .
Source
Isermous
Level
Error
Description
The hardware resources for  are already in use by another device.
Source
ITW
Level
Error
Description
The description for Event ID ( 4 ) in Source ( ITW ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Error in Parsing Event: <error details>.
Source
JRAID
Level
Error
Description
Driver detected an internal error in its data structures for \Device\Scsi\JRAID2.
Source
k57nd60a
Level
Warning
Description
Broadcom NetLink (TM) Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected.
Source
Kerberos
Level
Error
Description
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server <computer name>$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (<domain name>), and the client realm. Please contact your system administrator.
Source
Kerberos
Level
Error
Description
The function InitializeSecurityContex received a Kerberos Error Message:
         on logon session <logon session>
Client Time: <time>
Server Time: <server time>
Error Code: 0x7 KDC_ERR_S_PRINCIPAL_UNKNOWN
Client Realm: <realm>
Client Name: <name>
Server Realm: <domain name>
Server Name: krbtgt/<domain>
Target Name: HOST/<host@domain.name>
Error Text:
File:
Line:
Error Data is in record data.
Source
l2nd
Level
Warning
Description
HP NC373i: The network link is down. Check to make sure the network cable is properly connected.
Source
LightScribeService
Level
Information
Description
The LightScribe Service started successfully.
Source
MailCfg
Level
Information
Description
WebShield SMTP Service - AutoUpdate Scheduler event triggered
Source
MailScan
Level
Error
Description
WebShield SMTP Service - <error message>.
Source
Media Center Receiver
Level
Error
Description
TV tuner malfunction. (<error code>) <TV tuner> TvTuner.
Source
Microsoft-Windows-Backup
Level
Information
Description
Backup finished successfully.
Source
Microsoft-Windows-FilterManager
Level
Warning
Description
File System Filter 'wcifs' (Version 10.0, ?2016?-?09?-?15T11:42:03.000000000Z) failed to attach to volume '\Device\HarddiskVolumeShadowCopy1'. The filter returned a non-standard final status of 0xC000000D. This filter and/or its supporting applications should handle this condition. If this condition persists, contact the vendor.
Source
Microsoft-Windows-Kernel-Processor-Power
Level
Error
Description
Processor 6
  IdleStateCount 1
  PerfStateCount 10
  ThrottleStateCount 0
  IdleState 01000000
  PerfState E90A000064000000640A00005 F000000DF0900005A0000005A09000055 000000D508000050000000500800004C 000000CB070000470000004607000042 000000C10600003D0000003C0600 0039000000
Source
Microsoft-Windows-Security-Kerberos
Level
Error
Description
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/Server2.DOMAINA.com. The target name used was cifs/Server2DOMAINB.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on and only registered on the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified and the target domain (DOMAINA.COM) is different from the client domain (DOMAINB.COM) check if there are identically named server accounts in these two domains or use the fully-qualified
Source
Microsoft-Windows-SpoolerWin32SPL
Level
Error
Description
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.
Source
Microsoft-Windows-WUSA
Level
Warning
Description
Windows update Hotfix for Windows (KB2465990) requires a computer restart to complete the installation. (Command line: ""C:\Windows\system32\wusa.exe" "C:\temp\hf\Windows6.1-KB2465990-v3-x64.msu"        ")
Source
Mobile Information Server HTTP Connector
Level
Error
Description
HTTP Connector cannot establish a connection to the remote host. Please check to make sure that it is the correct host name, and that the server is up and running.
Source
MSExchangeES
Level
Error
Description
An unexpected OS error occurred. Error returned was [5]. Access is denied.
Source
MSExchangeMGMT
Level
Information
Description
Stopping the Microsoft Exchange Management service.
Source
msi8042
Level
Error
Description
The hardware resources for  are already in use by another device.
Source
N100
Level
Warning
Description
Adapter HP <NIC> Fast Ethernet NIC #2: Adapter Link Down.
Source
Norton Antivirus
Level
Information
Description
Update to computer (computer name) of virus definition file (virus definition date) failed. Status <error code>
Source
nv
Level
Error
Description
Channel Busy Error on Ch 0000001f SC 00000006 M 00000000 Data 00001400
Source
nvatabus
Level
Error
Description
Device slot returned an invalid status value. See data for detailed information.
Source
nvidesm
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
Oracle.wired
Level
Information
Description
The description for Event ID ( 4 ) in Source ( Oracle.wired ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .
Source
OracleOraHome90Agent
Level
Error
Description
Agent process exited abnormally during initialization.
Source
OracleOraHome92Agent
Level
Error
Description
Agent process exited abnormally during initialization.
Source
Otman4
Level
Information
Description
The description for Event ID ( 4 ) in Source ( Otman4 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .
Source
OTMan5
Level
Information
Description
OTM closed
Source
patfcpq
Level
Error
Description
Service Failure. Error: Couldn't open connection to the PATROLAgent.PemnBOpen returned <error> Invalid Password. Please use PFIMUser utility to set Patrol for Insight Manager user account and password.
Source
PLSCSI
Level
Error
Description
Driver detected an internal error in its data structures for \Device\Scsi\PLSCSI1.
Source
pnpshark
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
POPBeamer
Level
Error
Description
Expected an +OK but got an -ERR[74].
Source
Print
Level
Warning
Description
Printer <printer name> is pending deletion.
Source
q57amd64
Level
Warning
Description
HP NC7782 Gigabit Server Adapter: The network link is down.  Check to make sure the network cable is properly connected.
Source
q57w2k
Level
Error
Description
<adapter>: The network link is down.  Check to make sure the network cable is properly connected.
Source
Quickbooks
Level
Error
Description
The description for Event ID ( 4 ) in Source ( QuickBooks ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: <message>
Source
Reflection Links
Level
Error
Description
Constructor failure - The specified domain either does not exist or could not be contacted.
Source
sbp2port
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
serial
Level
Warning
Description
Unable to create the symbolic link for <com port>.
Source
SITomcat
Level
Information
Description
The description for Event ID ( 4 ) in Source ( SITomcat ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: SITomcat.
Source
sojubus
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
SpoolerWin32SPL
Level
Warning
Description
The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing or if the registry recently became unavailable.
Source
sptd
Level
Error
Description
Driver detected an internal error in its data structures for.
Source
SRMSVC
Level
Error
Description
File Server Resource Manager Service information: The COM Server with CLSID {efbdb74f-5b0d-4ad8-9aaf-aae0c8840a30} and name 'SrmReportManager' cannot be started.

Error: <error code>.
Source
SRTSP
Level
Error
Description
Error msg: Error loading Virus defenitions
Source
Symantec Antivirus Corporate Edition
Level
Error
Description
Update to computer <computer name> of virus definition file <version> failed" status <error code>.
Source
symarray
Level
Error
Description
Driver detect an internal error in its data structures for \Device\Harddisk0\Partition0.
Source
UlSata
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
Ultra
Level
Error
Description
The description for Event ID ( 4 ) in Source ( Ultra ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer.
Source
UndeleteService
Level
Error
Description
UndeleteService: Executive Software Undelete Driver Error - Error ID = 105-32-0-3. Extended Data: c0000001 00000000.
Source
UPService
Level
Error
Description
The description for Event ID ( 4 ) in Source ( UPService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: UPService: PDH FAILED -- Error resampling data: -2147481643 0x800007d5.
Source
vdrv7000
Level
Error
Description
Driver detected an internal error in its data structures for .
Source
VDS Dynamic Provider 1.0
Level
Error
Description
The provider failed to load the disk into the cache.
Disk: <disk>.
Source
viadsk
Level
Error
Description
Driver detected an internal error in its data structure.
Source
Virtual Disk Service
Level
Information
Description
Service stopped.
Source
VMnetuserif
Level
Error
Description
(\Device\VMnetUserif) Driver entry exiting with status 0.
Source
VolSnap
Level
Error
Description
The shadow copy of volume <volume> could not be created due to insufficient resources for worker threads.
Source
W32Time
Level
Error
Description
The time provider 'NtpClient' failed to start due to the following error: <error message>. (<error code>).
Source
W3SVC
Level
Error
Description
HTTP Server was unable to initialize due to a shortage of available memory. The data is the error: <data>.
Source
WcesComm
Level
Warning
Description
More than one Windows Mobile-based device cannot be connected at the same time.
Source
WinMgmt
Level
Error
Description
Failed to load MOF <file> while recovering repository file.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...