Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
Unable to open the Server service. Server performance data will not be returned. Error code returned is in data DWORD 0.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0000: 34 00 00 c0
|8 Comments for event id 2004 from source PerfNet|