Event Logs coming in with the wrong EventID

C

CLAIR10

I have multiple Microsoft Windows Server 2022 servers that are having some log discrepancy. There are instances where the eventIDs are wrong, an example is 4768 which should be "A Kerberos authentication ticket (TGT) was requested" is coming in as many different events including "An account was logged off" which should be 4634. There have been a total of 33 different message descriptions like those above, coming in under 4678. The actual 4678 events that are correct are coming in as "Failure Audit" or "FAILED" even though the error code is 0x0 which should indicat

Continue reading...
 

Similar threads

B
Replies
0
Views
138
Brandon LeBlanc
B
B
Replies
0
Views
161
Brandon LeBlanc
B
B
Replies
0
Views
218
Brandon LeBlanc
B
B
Replies
0
Views
230
Brandon LeBlanc
B
M
Replies
0
Views
184
Microsoft Edge Team
M
Back
Top Bottom