Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 41

Source
Application Popup
Level
Information
Description
The CPUs in this multiprocessor system are not all the same revision level. To use all processors the operating system restricts itself to the features of the least capable processor in the system. Should problems occur with this system, contact the CPU manufacturer to see if this mix of processors is supported.
Source
disk
Level
Error
Description
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the device <device> with label "<label>".
Source
diskperf
Level
Error
Description
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the device <device> with label "<label>".
Source
i8042prt
Level
Error
Description
An error occurred while enabling the mouse to transmit information.  The device has been reset in an attempt to make the device functional.
Source
iANSMiniport
Level
Warning
Description
Intel(R) PRO/1000 MT Network Connection is improperly configured. The adapter cannot process the remote management features and be a member of an EtherChannel or 802.3ad network team at the same time.
Source
Kernel-Power
Level
Critical
Description
The last sleep transition was unsuccessful. This error could be caused if the system stopped responding failed or lost power during the sleep transition.
Source
Kernel-Power
Level
Critical
Description
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding crashed or lost power unexpectedly.
Source
Lockserver
Level
Error
Description
TCPReadPacket: For Client <client> Computer Name <IP address> UserID SAL Socket Recv error <error>, socket closed.
Source
Microsoft-Windows-Hyper-V-Hypervisor
Level
Error
Description
Hyper-V launch failed; Either VMX not present or not enabled in BIOS.
Source
Mobile Information Server
Level
Error
Description
HTTP Authentication processing failed with error: The token passed to the function is invalid.
Source
MSExchange OWA
Level
Error
Description
The Client Access server "https://dom.domain.com/owa" attempted to proxy Outlook Web Access traffic for mailbox "/o=ExchMigrationLab/ou=Exchange Administrative Group (SERVRNAME)/cn=Recipients/cn=gquagmire". This failed because no Client Access server with an Outlook Web Access virtual directory configured for Kerberos authentication could be found in the Active Directory site of the mailbox. The simplest way to configure an Outlook Web Access virtual directory for Kerberos authentication is to set it to use Integrated Windows authentication by using the Set-OwaVirtualDirectory cmdlet in the Exchange Management Shell or by using the Exchange Management Console. If you already have a Client Access server deployed in the target Active Directory site with an Outlook Web Access virtual directory configured for Kerberos authentication the proxying Client Access server may not be finding that target Client Access server because it does not have an internalUrl parameter configured. You can configure the internalUrl parameter for the Outlook Web Access virtual directory on the Client Access server in the target Active Directory site by using the Set-OwaVirtualDirectory cmdlet.
Source
MSExchangeDSExp
Level
Information
Description
Starting the directory export.
Source
MSExchangeMTA
Level
Error
Description
There are too many concurrently connected entities. There are no free entity control blocks (ECBs) available. There are currently <value> ECBs configured. [<value><value>value><value>] (14).
Source
Print
Level
Warning
Description
The PrintQueue could not be found on domain <domain name>. It may have been deleted from the Directory. An attempt will be made to republish the PrintQueue. Error: 2116.
Source
ScsiPwr
Level
Error
Description
The description for Event ID ( 41 ) in Source ( ScsiPwr ) could not be found. It contains the following insertion string(s):  .
Source
TermServLicensing
Level
Error
Description
Can't initialize policy module because of error 'Missing Policy module registry entry for product Microsoft Corporation, company 004'
Source
VolSnap
Level
Error
Description
When preparing a new volume shadow copy for volume <volume> the shadow copy storage on volume <volume> did not have sufficiently large contiguous blocks. Consider deleting unnecessary files on the shadow copy storage volume or use a different shadow copy storage volume.
Source
VSP
Level
Error
Description
Couldn't find the description for event ID (41) in source (VSP). Include the following character:\Device\VSPSnapshot1,.
Source
WinMgmt
Level
Error
Description
WMI ADAP was unable to create object index <index number> for Performance Library <service name> because no value was found in the <language id> subkey.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...