Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 55 Source: TermService

Attempt to send a message to a disconnected communications port.
When I encountered this problem, I thought it was related with our corporate firewall. However, come to think of it, I had Spy Sweeper installed on the computer. Instead of uninstalling the program, I reinstalled it and the problem did not reappear.
My Citrix server also had the problem, after 10 minutes no ICA or RDP clients could connect to the server and this event would get logged in the Event log. The Microsoft technician instructed me to uninstall Spy Sweeper, which fixed my problem.
From a newsgroup post: "I just hung up with Microsoft Business Critical support to learn that HotFix KB840987 as seen through Add/Remove Programs is the cause of this issue. At least on servers with Win2k SP4. MS had me remove this HotFix using Change/Remove which immediately reboots the server when you click Finish at the end of the uninstall process". See the link to " - Error: attempt to send a message to disconnected communication port" for the original thread.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.