Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 36 Source: serial

Source
Level
Description
While validating that com1 was really a serial port, the contents of the divisor latch register was identical to the interrupt enable and the receive registers. The device is assumed not to be a serial port and will be deleted.
Comments
 
In our case this error occurs because of a special license key fob attached to the serial port.  The error is correct, it is not a serial port. This particular fob is for Avaya Voicemail Pro.
From a newsgroup post: An error message appears in Event Viewer if you attempt to configure a com port that physically does not exist on the system. Suppose you went to the Ports option in Control Panel and added a COM3 port, when in fact you physically only have COM1 and COM2 on the system.

The event log message id 11 means that the system will delete the I/O address entry for the non-existent port in the Windows NT internal I/O port address table. The entry for this non-existent port will still exist in the Ports option of Control Panel and in the appropriate key of the Registry.

To clear these messages from Event Viewer, do one of the following:
- Use the Advanced Settings dialog box to change the I/O, IRQ, or the COM Port Number setting
-or-
- Delete the appropriate entry from the Windows NT Registry using Registry Editor.

Using the Advanced Settings dialog box clears the error messages in many cases, but in two cases you need to delete certain entries in the Registry:
- If you want to change the settings for a COM port already detected at Setup by NTDETECT.
-or-
- If the COM port in question doesn't physically exist on the system.

In the first case, the Advanced Settings option will not be available. In the second case, no facility exists in the Ports dialog box to delete the entry for the non-existent COM port. To delete the false entry from the Registry, use the Registry Editor (REGEDT32.EXE) to find the following key:  
   \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet
       \Services\Serial\Parameters

The Parameters key lists one or more subkeys listed as Serial10000, Serial10001, and so on. Check the DosDevice value to find which subkey represents the non-existent COM port. Then, highlight the subkey for the erroneous serial port and choose Delete from the Edit menu.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...