E
Ersan Topaç
Hi there,
When i analysis my Exchange Servers security logs i see just 1 of day logs. i want know if my logs was cleared? i see 1102 Event log ID but it is not in security log it comes from Application logs? what is the means if 1102 in Application log? can i say my logs cleared from remote PC? or how can know if logs cleared.
Event name: Application
Source: Microsoft-Filtering-FIPFS
User: NETWORK SERVİCE
Level: İnformation
Body text: The description of 1102 Event ID in Microsoft-Filtering-FIPFS source cannot be found. The component that initiated this event is not installed on your local computer, or the installation is corrupted. You can install the component on the local computer or repair it if it is installed. If the event was started from another computer, the viewing information should have been recorded with the event.
Continue reading...
When i analysis my Exchange Servers security logs i see just 1 of day logs. i want know if my logs was cleared? i see 1102 Event log ID but it is not in security log it comes from Application logs? what is the means if 1102 in Application log? can i say my logs cleared from remote PC? or how can know if logs cleared.
Event name: Application
Source: Microsoft-Filtering-FIPFS
User: NETWORK SERVİCE
Level: İnformation
Body text: The description of 1102 Event ID in Microsoft-Filtering-FIPFS source cannot be found. The component that initiated this event is not installed on your local computer, or the installation is corrupted. You can install the component on the local computer or repair it if it is installed. If the event was started from another computer, the viewing information should have been recorded with the event.
Continue reading...