Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 1 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 1
Event Source: STCAgent
Event Type: Warning
Event Description:
Function: CVirtualAdapter::SetVADeviceMTU - uiMTU
Return code: 1300
File: e:\temp\build\workspace\SSLClient\Agent\WindowsVirtualAdapter.cpp
Line: 2110
Description: Not all privileges referenced are assigned to the caller.
Comment:
Event ID: 1
Event Source: CaPmRacc
Event Type: Warning
Event Description: Unable to produce Resource Accounting Information No configuration received from Historical Performance Agent.
Comment:
Event ID: 1
Event Source: Client Host Name Resolver
Event Type: Error
Event Description: Connect: The system cannot find the file specified.
Comment:
Event ID: 1
Event Source: CSAdminServer
Event Type: -
Event Description: -
Comment: The DNS server timed out attempting an Active Directory service operation on DC=accman01,DC=robertet.ir,cn=MicrosoftDNS,DC=DomainDnsZones,DC=robertet,DC=ir.  Check Active Directory to see that it is functioning properly. The event data contains the error. Index: 10050
Event ID: 1
Event Source: nrbmonn
Event Type: Error
Event Description: The description for Event ID ( 1 ) in Source ( nrbmonn ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: .
Comment:
Event ID: 1
Event Source: LightScribeService
Event Type: Error
Event Description: Win32 Error: Function [HurricaneClientProxy:OpenCDROMDevice] Error
opening class device \\\CDRQM1 returned Win32 Error:1006 Description: The volume for a fie has been external altered so that the opened fie is no longer valid
Comment: My burning process was ok but when i burn lots of cds coutinously the burning process will stop. after checking event viewer i got above error message.

I used Samsung External DVD re-writer

i'm glad if you sent me a solution
Thanks in advance for your helping
Event ID: 1
Event Source:  
Event Type: -
Event Description: -
Comment: Most likely caused by Apple Safari v4.0-530.17

Beim Verarbeiten der Datei "MSI7efc.tmp" auf Volume "HarddiskVolumeRD" ist im Wiederherstellungsfilter der unerwartete Fehler "0xC0000010" aufgetreten. Die Volumeüberwachung wurde angehalten.

0000: 0e 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........ Index: 0
Event ID: 1
Event Source: MSExchange Autodiscover
Event Type: Error
Event Description: Unhandled Exception ''Multiple objects with e-mail address SMTP:administrator@cmigroupe.local were found.''Stack Trace: at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientSession.FindByProxyAddress[TResult](ProxyAddress proxyAddress IEnumerable`1 properties) at Microsoft.Exchange.Autodiscover.Providers.Outlook.OutlookAutoDiscoverProvider..ctor(RequestData requestData)
Comment:
Event ID: 1
Event Source: WinVNC4
Event Type: Error
Event Description: HTTPServer: untrapped: End of stream
Comment:
Event ID: 1
Event Source: Protection Manager
Event Type: Information
Event Description: KAVX0001-I The drmfsbackup command will now start.

Comment:
Event ID: 1
Event Source: VBRuntime
Event Type: Error
Event Description: The description for Event ID 1 from source VBRuntime cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer the display information had to be saved with the event.

The following information was included with the event:

Application aBILLity: Thread ID: 12912 Logged: Source: Microsoft OLE DB Provider for SQL Server
Error code: -2147217913

The conversion of a char data type to a datetime data type resulted in an out-of-range datetime value.
frmInvoiceHistory.open_data_source:2

frmInvoiceHistory.comPeriod_Click:12


the message resource is present but the message is not found in the string/message table

Comment: I would appreciate any help in this matter. thanks!
Event ID: 1
Event Source: digc_log
Event Type: Error
Event Description: In wnidows XP pc eveintid 1 source: digc_log

Pc shutdown automatically.
Comment:
Event ID: 1
Event Source: WSH
Event Type: Error
Event Description: Error in LoginScript: Map: R:  \\LTKWEBSPHERE\PROGS
Denne netværksforbindelse findes ikke.
(This networkconnection does not exist)
Comment:
Event ID: 1
Event Source: Autocue Time Synchronisation Service
Event Type: Error
Event Description:
Event Type:      Error

Event Source:      Autocue Time Synchronisation Service
Event Category:      None
Event ID:      1
Date:            11/1/2009
Time:            6:02:20 AM
User:            N/A
Computer:      RMIDSQAPDCI01

XP System
Comment:
Event ID: 1
Event Source: Virtual Disk Service
Event Type: -
Event Description: -
Comment: I have this error (with Error code: 1@0200001D) on this version of Windows:
Microsoft Windows Server 2003 R2, Standard Edition, Service Pack 2, English, x86. [Version 5.2.3790]

And I am not sure if previously described hotfixes are useful for this version. Index: 4420
Event ID: 1
Event Source: avg9emc
Event Type: Information
Event Description:
Event Type: Information

Event Source: avg9emc
Event Category: None
Event ID: 1
Date: 12/13/2009
Time: 1:35:11 PM
User: N/A
Computer: WHAMMERDYNE
Description:
The description for Event ID ( 1 ) in Source ( avg9emc ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: Service started.

Comment: Event ID (1) Source (avg9emc) usually occurs immediately following Event ID (1) Source (Diskeeper2010 Build: (14.0.896.0)). The Diskeeper Control Center has been started. Diskeeper service started.
Event ID: 1
Event Source: Retrospect
Event Type: Error
Event Description: Can''t use Open File Backup option for Templates on Main (C:) error -1017 (insufficient permissions)
Comment: Windows 7 throws other 'unknown os errors' so this is in XP sp3 compatability mode.
Event ID: 1
Event Source: vhdparser
Event Type: Warning
Event Description: The parent virtual hard disk appears to have been modified without using the differencing virtual hard disk located at "...\\8BB8B087-23B7-49EB-8E96-F7AE1DD8EFE1\VTI-VPC1_E2F29065-3FAE-4986-B293-C20945AF6564.avhd".  Modifying the parent virtual hard disk may result in data corruption.  It is strongly recommended that you lock the parent virtual hard disk to prevent this in the future.  If you recently changed time zones on your computer you can safely continue using this virtual hard disk.
Comment:
Event ID: 1
Event Source: OMCI
Event Type: Information
Event Description: A temperature probe has exceeded a non-critical threshold.  Contact your Help Desk or Dell Technical Support for further assistance.
Comment: It was on a laptop in an enclosed medical cart. I blew the fans out with canned air. Hopefully that will stop it.
Event ID: 1
Event Source: Microsoft Firewall Client 2004
Event Type: -
Event Description: -
Comment: it was solved by install win2k3 service pack 2 and isa 2004 service pack 3 together, it is not working if install just one of them you have to install the both Index: 8216
Event ID: 1
Event Source: RasSstp
Event Type: Error
Event Description: CoId={2C06A7A9-30C8-4512-AE4D-1A2EBC01E584}:The initial Secure Socket Tunneling Protocol request could not be successfully sent to the server. This can be due to network connectivity issues or certificate (trust) issues. The detailed error message is provided below. Correct the problem and try again.

A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider.

Comment: During connecting to VPN windows 7
Event ID: 1
Event Source: Micro Focus COBOL
Event Type: Error
Event Description: c:\windows\system32\inetsrv\w3wp.exe

Load error : file ''''
error code: 104 pc=0 call=1 seg=0
104      error message text not found
Comment:
Event ID: 1
Event Source: WinVNC4
Event Type: Error
Event Description: Connections: closed: 192.168.27.16::3741 (Unable to connect session to Console: Access is denied. (5))
Comment: Trying to connect to a Windows 7 system using a domain admin account and get this error.
Event ID: 1
Event Source: Intel Server Manager
Event Type: Error
Event Description: Fan Syst Fan 2: Lower Critical - going low
Comment:
Event ID: 1
Event Source: SQLANY 10.0
Event Type: Error
Event Description: The description for Event ID ( 1 ) in Source ( SQLANY 10.0 ) cannot be found  The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer.  You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details.  The following information is part of the event: SQLANYs_Sage_FAS_Fixed_Assets Could not start server.
Comment: Getting this error after a full restore of the server.
Event ID: 1
Event Source: canonprinterdriver3
Event Type: Error
Event Description: The description for Event ID ( 1 ) in Source ( CanonPrinterDriver3 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: DrvPrinterEvent 6A900000 7C910F1E ACCESS_VIOLATION.
Comment:
Event ID: 1
Event Source: SQLVDI
Event Type: Error
Event Description:
Event Type: Error

Event Source: SQLVDI
Event Category: None
Event ID: 1
Date: 6/26/2010
Time: 3:30:34 AM
User: N/A
Computer: MIASQLSERVICE01
Description:
SQLVDI: Loc=SignalAbort. Desc=Client initiates abort. ErrorCode=(0). Process=2564. Thread=3472. Client. Instance=. VD=Global\SQLBACKUP_32D39EAE-BC7F-4C6F-BEB9-6685B218E8E9_SQLVDIMemoryName_0.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Comment:
Event ID: 1
Event Source: KIXTART
Event Type: Error
Event Description: The description for Event ID 1 from source KIXTART cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer the display information had to be saved with the event.

The following information was included with the event:


ERROR : failed to find/open script [logon.kix]!
Error : Incorrect function. (0x1/1)

Comment:
Event ID: 1
Event Source: IJPLMSVC
Event Type: Information
Event Description: Type : Information
Date : 25.08.2010
Time : 16:04:04
Event : 1
Source : IJPLMSVC
Category : None
User : N/A
Computer : ...
Description:
The service is started.


Comment: It's an extension for PIXMA Printer from CANON.
Event ID: 1
Event Source: Microsoft-Windows-DiskDiagnostic
Event Type: Error
Event Description: Log Name:      System
Source:        Microsoft-Windows-DiskDiagnostic
Date:          9/6/2010 10:25:34 AM
Event ID:      1
Task Category: None
Level:         Critical
Description:
Windows Disk Diagnostic detected a S.M.A.R.T. fault on disk ST9500420AS ATA Device (volumes D:\E:\C:\).  This disk might fail back up your computer now. All data on the hard disk including files documents pictures programs and settings might be lost if your hard disk fails.  To determine if the hard disk needs to be repaired or replaced contact the manufacturer of your computer.  If you can''t back up (for example you have no CDs or other backup media) you should shut down your computer and restart when you have backup media available.  In the meantime do not save any critical files to this disk.
Please Help Me Immedatly

Comment:
Event ID: 1
Event Source: SMagent
Event Type: Error
Event Description: Message from SM agent service: SMagent: The SMagent service attempted to start but terminated. Possible causes include:  [1] The access virtual disk is disabled in NVSRAM. [2] No RAID controller modules with compatible firmware were found. [3] The default logical unit number (LUN) assigned to the access virtual disk (typically 7 or 31) is not in the range supported by the host or is already in use by the host for another device. See your storage management documentation for more details.    


The Host Context Agent did NOT start because 0 RAID controller modules were found.
Comment: Windows 2008 R2 x64 Hyper-V with Dell iSCSI Storage attached
Event ID: 1
Event Source: vpnagent
Event Type: Error
Event Description:
Event Type: Error

Event Source: vpnagent
Event Category: None
Event ID: 1
Date: 10/28/2010
Time: 1:19:59 PM
User: N/A
Computer: CHOME1
Description:
Function: COpenSSLCertificate::IsFIPSCompliant
File: .\Certificates\OpenSSLCertificate.cpp
Line: 1904
Signature algorithm is not FIPS compliant.

Comment:
Event ID: 1
Event Source: CiscoAAA
Event Type: Error
Event Description:
Event Type:        Error

Computer:          PR11A

Description:

The description for Event ID ( 1 ) in Source ( CiscoAAA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: CSAuth Can not initialize SchemeLayer 74.

Comment: Unknown cause. Unknown solution.
Event ID: 1
Event Source: SiteMinder Agent
Event Type: Error
Event Description:
Event Type: Error

Event Source: SiteMinder Agent
Event Category: None
Event ID: 1
Date: 4/13/2011
Time: 12:26:11 AM
User: N/A
Computer: DDWAS1041
Description:
The description for Event ID ( 1 ) in Source ( SiteMinder Agent ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event:  .
Comment:
Event ID: 1
Event Source: DeepFrz
Event Type: Information
Event Description: Read from record ID 23.
Comment: DeepFrz is a service belonging to http://www.faronics.com/Products/DeepFreeze.aspx I have no idea what this event actually means though :-(.
Event ID: 1
Event Source: SQLVDI
Event Type: Error
Event Description: SQLVDI: Loc=SignalAbort. Desc=Client initiates abort. ErrorCode=(0). Process=2024. Thread=16612. Client. Instance=MICROSOFT##SSEE. VD=Global\device41D91937_SQLVDIMemoryName_0.
Comment: Also get Event ID 3041 Source MSSQL$MICROSOFT##SSEE daily.
Event ID: 1
Event Source: VIP Access
Event Type: Information
Event Description: The description for Event ID 1 from source VIP Access cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer the display information had to be saved with the event.

The following information was included with the event:

VIP Access Start: Mutex Created Successfully

Comment: VIP Access is not allowing logon to another site. Running Win 10 worked fine under Win 7. A previous error message talked about an issue that occurs if theres not enough permission for Network Service account for MSDTC service but could not replicate it this time.
Event ID: 1
Event Source: acvpnagent
Event Type: -
Event Description: -
Comment: I have a different error for Event 1, acvpnagent:

Log Name:      Cisco AnyConnect Secure Mobility Client
Source:        acvpnagent
Date:          1/01/2017 12:00:00 AM
Event ID:      1
Task Category: Engineering Debug Details
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      COMPUTERNAME.DOMAIN.TLD
Description:
Function: CServicePluginMgr::GetSettings
File: ServicePluginMgr.cpp
Line: 289
m_pIServicePlugin is NULL Index: 11472
Event ID: 1
Event Source: -1'
Event Type: Information
Event Description: 1
Comment: 1
Event ID: 1
Event Source: Microsoft-Windows-Kernel-Tm
Event Type: Information
Event Description: 987654321
Comment: Immediately after this error
Log Name:      System
Source:        VDS Basic Provider
Date:          29/08/2017 08:50:57
Event ID:      1
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      hs1c09n1.als-gate.it
Description:
Unexpected failure. Error code: 490@01010004
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="VDS Basic Provider" />
    <EventID Qualifiers="49664">1</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2017-08-29T06:50:57.000000000Z" />
    <EventRecordID>84660</EventRecordID>
    <Channel>System</Channel>
    <Computer>hs1c09n1.als-gate.it</Computer>
    <Security />
  </System>
  <EventData>
    <Data>490@01010004</Data>
  </EventData>
</Event>
event id: 1 event source: speechruntime event type: warning event description: audio orchestrator power event: battery saver turned on voice activation disabled comment:

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...