Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 1004 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 1004
Event Source: Active Administrator Maintenance Service
Event Type: Warning
Event Description: The service agent was not found on server <ServerName>. Error: Cannot open Service Control Manager on computer ''<ServerName>''. This operation might require other privileges.
Comment: Active Administrator Maintenance Service needs to access the Service Control Manager (SCM) on all computers running the auditing agents and the SCM running on the Active Administrator server and to access the Audit database. The user for the Maintenance service must be a member of the local Administrator group on any computer running the Auditing Agents and for the Active Administrative server. The user must be an Administrator on the local computer to open and control the SCM.
Event ID: 1004
Event Source: Offline Files
Event Type: Information
Event Description: Path \\server\share transitioned to slow link with latency = 20 and bandwidth = 0
Comment: Windows 7 with offline files transition limit set to 1ms by GPO reports to be in offline state while connected to the domain using a link with latency more than 1ms but still transitions to online and continue to be in an online state. Even if SMB 2.1 used on both the client and the servers (file/dc) in question the Win7 client remains online.
Event ID: 1004
Event Source: DTCounters
Event Type: Error
Event Description: The Doble-Take counter DLL could not read the "First Counter" value under the Double-Take\Performance Key.
Comment:

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...