Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 20 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 20
Event Source: Lansafe PM
Event Type: Error
Event Description: The description for Event ID ( 20 ) in Source ( LanSafe PM ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: UPS communications lost (wink).
Comment: It effects the CA Brighstor backup thhrough the network
Event ID: 20
Event Source: oracle.emr
Event Type: Error
Event Description: The description for Event ID ( 20 ) in Source ( Oracle.emr ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer You may be able to use the /AUXSOURCE=flag to retrieve this discription; see Help and Support for details. The following information is part of the event: ARC1" Creating local archive destination LOG_ARCHIVE_DES_1:  "D:\HLTHPNT\DATABASE\ARCHIVE\ARC4095.001" (thread 1 sequence 4095)
(emr)
Comment:
Event ID: 20
Event Source: oracle.tac
Event Type: Error
Event Description: The description for Event ID ( 20 ) in Source ( Oracle.tac ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: tac; ARC1: Completed archiving  log 1 thread 1 sequence 8383
Comment:
Event ID: 20
Event Source: b57w2k
Event Type: Error
Event Description: Broadcom NetXtreme Gig: Driver initialization failed.
Comment: Broadcon Networkcard (NetXtreme Gigabit Ethernet)was deaktivatet and i want to aktivate the card.
IBM e Server x-Series 346
Event ID: 20
Event Source: OFMLvDrv
Event Type: Error
Event Description: An exception was caught in OlvpSynchronizeSystem.
Comment:
Event ID: 20
Event Source: WebCatcher
Event Type: Error
Event Description: Unable to post to webcatcher.websense.com.  The error number returned was HTTP Post failed with message 504

Comment:
Event ID: 20
Event Source: b57nd
Event Type: Error
Event Description: Broadcom NetXtreme 57xx Gigabit Controller: Driver initialization failed.
Comment: It appears in a WindowsXP x64 installation driverupdates doesn't resolve the problem.
After reinstall driver: "device cannot start (code  10)".
Event ID: 20
Event Source: b06nd
Event Type: Error
Event Description: Description:
Broadcom BCM5708C NetXtreme II GigE: Driver initialization failed.

Comment: After installing Server2003Std on a Dell Poweredge 2900 make sure to install the latest driver from Dell Driver and Support Page
Event ID: 20
Event Source: AssetManagement
Event Type: Warning
Event Description: Security audit policy "Audit Logon Events" is not enabled. Client Access License (CAL) information will not be collected.
Comment:
Event ID: 20
Event Source: VDS Dynamic Provider 1.1
Event Type: Error
Event Description: he description for Event ID ( 20 ) in Source ( VDS Dynamic Provider 1.1 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Disk: \Device\Harddisk3.
Comment: This appeared on a 2003 Server after I removed one of the hard drives following hibernation. It could also point to failed hard disk.
Event ID: 20
Event Source: Oracle.sppid
Event Type: Error
Event Description: Archive process error: ORACLE Instance sppid - Archival Error

Archive process error: ORA-16014: log 2 sequence# 45 not archived no available destinations
ORA-00312: online log 2 thread 1: ''D:\ORACLE\PRODUCT\10.2.0\ORADATA\SPPID\REDO02.LOG''

Comment:
Event ID: 20
Event Source: Print
Event Type: -
Event Description: -
Comment: Had this problem with an Brother HL-6050dn, using the newer drivers (PCL...). We installed the network-printer on an Win2003R2 Std. machine, which acts as a print-server. Everytime a client prints, there was the eventid 20 in the client log.

Finally we solved this installing the PCL5e-Driver on the 2003-print-server.

Index: 42
Event ID: 20
Event Source: Windows Update Agent
Event Type: Error
Event Description: Installation Failure: Windows failed to install the following update with error 0x80242007:

Security Update for Windows 2000 (KB977816).
Data:
0000: 57 69 6e 33 32 48 52 65   Win32HRe
0008: 73 75 6c 74 3d 30 78 38   sult=0x8
0010: 30 32 34 32 30 30 37 20   0242007
0018: 55 70 64 61 74 65 49 44   UpdateID
0020: 3d 7b 31 44 37 37 37 34   ={1D7774
0028: 36 31 2d 42 35 37 41 2d   61-B57A-
0030: 34 33 31 35 2d 39 39 41   4315-99A
0038: 35 2d 33 35 32 44 38 31   5-352D81
0040: 34 30 44 42 44 46 7d 20   40DBDF}
0048: 52 65 76 69 73 69 6f 6e   Revision
0050: 4e 75 6d 62 65 72 3d 31   Number=1
0058: 30 31 20 00               01 .
Comment: KB977816 fails to apply to 2000 server. After server reboots update reappears and asks to be installed.
Following is from the kb977816.log
[KB977816.log]

0.062: ================================================================================
0.062: 2010/05/01 22:00:11.654 (local)
0.062:

C:\WINNT\SoftwareDistribution\Download\586671b6e88709181e116629645af021\update\update.exe

(version 6.3.13.0)
0.062: Failed To Enable SE_SHUTDOWN_PRIVILEGE
0.062: Hotfix started with following command line: -q -z -er

/ParentInfo:29aeabc414be3642a2395dea1597b201
0.062:   1339 GetBuildType:  noop for OS 5.0
0.062:  C:\WINNT\system32\l3codecx.ax is Present
0.062: First Condition in Test.Exist.WM.Section.wm Succeeded
0.062: Condition succeeded for section Test.Exist.WM.Section.wm in Line 1 of PreRequisite
0.562: In Function TestVolatileFlag line 11825 RegOpenKeyEx failed with error 0x2
0.562: In Function TestVolatileFlag line 11857 RegOpenKeyEx failed with error 0x2
0.562: DoInstallation: CleanPFR failed: 0x2
0.562:   1339 GetBuildType:  noop for OS 5.0
0.562: SetProductTypes: InfProductBuildType=BuildType.IS
0.578: SetAltOsLoaderPath: No section uses DirId 65701 done.
0.578:  C:\WINNT\system32\l3codecx.ax is Present
0.578: Condition succeeded for section Test.Exist.WM64.Section.1 in Line 1 of

Condition.WM64.Section
0.578: FileVersion of C:\WINNT\system32\l3codecx.ax is Greater or Equal To 1.5.0.00
0.578: Condition succeeded for section Test.Exist.WM64.Section.2 in Line 2 of

Condition.WM64.Section
0.578: FileVersion of C:\WINNT\system32\l3codecx.ax is Less Or Equal To  1.6.0.99
0.578: Condition succeeded for section Test.UpperVersionCheck.WM64.Section.1 in Line 3 of

Condition.WM64.Section
0.578:  C:\WINNT\system32\l3codeca.acm is Not Present
0.578: Condition Check for Line 1 of Condition.WM9.Section returned FALSE
0.578: DoInstallation: FetchSourceURL for

c:\winnt\softwaredistribution\download\586671b6e88709181e116629645af021\update\update.inf

failed
0.578: CreateUninstall = 1Directory = C:\WINNT\'$NtUninstallKB977816_WM9'$
0.578: LoadFileQueues: UpdSpGetSourceFileLocation for halmacpi.dll failed: 0xe0000102
0.578: BuildCabinetManifest: update.url absent
0.578: Starting AnalyzeComponents
0.578: AnalyzePhaseZero used 0 ticks
0.594: OEM file scan used 0 ticks
0.594: AnalyzePhaseOne: used 16 ticks
0.594: AnalyzeComponents: Hotpatch analysis disabled skipping.
0.594: AnalyzeComponents: Hotpatching is disabled.
0.609: AnalyzePhaseTwo used 15 ticks
0.609: AnalyzePhaseThree used 0 ticks
0.609: AnalyzePhaseFive used 0 ticks
0.609: AnalyzePhaseSix used 0 ticks
0.609: AnalyzeComponents used 31 ticks
0.609: Downloading 0 files
0.609: bPatchMode = FALSE
0.609: Inventory complete: ReturnStatus=0 31 ticks
0.609: Num Ticks for invent : 31
0.609: Allocation size of drive C: is 512 bytes free space = 9349340160 bytes
0.609: AnalyzeDiskUsage:  Skipping EstimateDiskUsageForUninstall.
0.609: Drive C: free 8916MB req: 6MB w/uninstall: NOT CALCULATED.
0.609: CabinetBuild complete
0.609: Num Ticks for Cabinet build : 0
0.609: DynamicStrings section not defined or empty.
0.609: FileInUse:: Added to Filelist: c:\winnt\kb977816.cat
0.609: FileInUse:: Added to Filelist: c:\winnt\system32\l3codecx.ax
0.609: FileInUse:: Added to Filelist: c:\winnt\system32\dllcache\l3codecx.ax
Event ID: 20
Event Source: Windows Update Agent
Event Type: -
Event Description: -
Comment: I used BAT file

****
net stop wuauserv
cd %systemroot%\SoftwareDistribution
ren Download Download.old
net start wuauserv
net stop bits
net start bits
net stop cryptsvc
cd %systemroot%\system32
ren catroot2 catroot2old
net start cryptsvc
*********
but it didn't work.
I get : "setup cannot update your win XP ..... because the language installed on your system is different from the update language"
when installing KB2478971 update.
I've chosen the correct "it" language. Index: 5343
Event ID: 20
Event Source: Google Update
Event Type: -
Event Description: -
Comment: I'm sorry -- the information didn't help me much.  I don't know of any thing I have that Google should be updating.  I don't use Chrome or any Google Apps.  So what is it trying so persistently to update.  It's almost every morning, usually starting at 4:07:05, then exactly every hour till, usually, 8:07:05.  Some days it misses 4 am, starting at 5, some days it continues on till 9, but always 7 min & 5 sec.
Index: 10093

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...