Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 25 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 25
Event Source: CimProvider
Event Type: Information
Event Description: Integrated RAID Volume physical disk 0x0 has Write Caching Disabled.
Comment:
Event ID: 25
Event Source: Director Agent
Event Type: Warning
Event Description: The system management processor has been accessed via a remote login. This event must be cleared manually.

Comment:
Event ID: 25
Event Source: VolSnap
Event Type: -
Event Description: -
Comment: The shadow copies of volume D: were deleted because the shadow copy storage could not grow in time.  Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied. Index: 3063
Event ID: 25
Event Source: nfrd960
Event Type: Error
Event Description:
Event Type: Error

Event Source: nfrd960
Event Category: None
Event ID: 25
Date: 11/6/2009
Time: 2:46:26 PM
User: N/A
Computer: IBM235
Description:
The driver has detected a device with old or out-of-date firmware.  The device will not be used.

For more information see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 00 10 00 01 00 68 00   ......h.
0008: 00 00 00 00 19 00 04 c0   .......À
0010: 71 07 00 00 00 00 00 00   q.......
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 00 00 00 00 00 00 00 00   ........
0030: 00 00 00 00 19 00 04 c0   .......À
Comment:
Event ID: 25
Event Source: e__sun_webserver6.1_https-admserv_config
Event Type: Error
Event Description: Server https-admserv: CORE0125: The server terminated abnormally with error code 0. An attempt will be made to restart it.
Comment: Error seen before server restarted. The error is strange because there is no sun product running on the server. Its a Windows 2003 server mainly running webapps.
Event ID: 25
Event Source: VolSnap
Event Type: Error
Event Description: The shadow copies of volume E: were deleted because the shadow copy storage could not grow in time.  Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied.
Comment:
Event ID: 25
Event Source: IAS
Event Type: -
Event Description: -
Comment: In Windows Server 2008 R2 this event source name has changed to NPS Index: 5621
Event ID: 25
Event Source: WindowsUpdateClient
Event Type: Error
Event Description: Windows Update no pudo buscar las actualizaciones con error 0x8024401f.
Comment: - System

  - Provider

   [ Name]  Microsoft-Windows-WindowsUpdateClient
   [ Guid]  {945A8954-C147-4ACD-923F-40C45405A658}

   EventID 25

   Version 0

   Level 2

   Task 1

   Opcode 11

   Keywords 0x4000000000000022

  - TimeCreated

   [ SystemTime]  2014-10-29T15:46:33.866393900Z

   EventRecordID 16006

   Correlation

  - Execution

   [ ProcessID]  896
   [ ThreadID]  7688

   Channel Microsoft-Windows-WindowsUpdateClient/Operational

   Computer SERVER-SMTP.inturotel.com.es

  - Security

   [ UserID]  S-1-5-18


- UserData

   errorCode 0x8024401f

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...