Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using a central syslog server to capture event logs from Windows machines. I am specifically interested in monitoring Windows services. This works well under XP machines - each time a service starts or stops, I see it logged in syslog. The string captured is similar to "xxx service successfully sent a start control" or "stop control". However, on Windows 2000, each time I start/stop a service manually, nothing is logged in Event Viewer. Is this normal?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.