If you are monitoring your Exchange Server environment and you have Windows Server 2003 for your CCR/SCC, it’s recommended to disable the Event Log replication between (if it’s a CCR)/among (if it’s a SCC) the nodes to avoid duplicate entries on your monitoring tool.
To disable the event log replication just run this following command on any node:
Cluster /prop EnableEventLogReplication=0
Cheers,
Anderson Patricio
http://blogs.msexchange.org/patricio
Twitter: @apatricio