Elastic Windows Event Explorer


Publisher - LsaSrv

Event ID 45058

Message:

A logon cache entry for user %{UserName} was the oldest entry and was removed. The timestamp of this entry was %{TimeStamp}.

Event Data:

# Name In Type
Out Type
1 UserName win:UnicodeString xs:string
2 TimeStamp win:SYSTEMTIME xs:dateTime

Observed Windows Versions:

Version: 0

Fingerprint: E73S25WEMHQO2