The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
31 views

Get delete events with file name and user for particular folder

In my windows server 2012 i want to know which files is deleted from a folder by which network user. I want to track delete events only for particular folder. I have done it using group policy and ...
0
votes
0answers
12 views

Windows event log administrative actions

Is there an entry in the event log entry that notifies that a user tried to perform an action that requires administrative authorization? Even if that user clicked cancel afterwards, I'd like to know ...
1
vote
0answers
72 views

How to detect if I/O errors are because of HDD fail or other Hardware/Software issues?

On my current system I had a 2TB HDD from Segate, after 2 years Windows started to restart on boot, so I formatted and installed ubuntu. All worked great but after a while I would get I/O errors, ...
0
votes
0answers
34 views

What are “SideBySide” errors, and what should I do about them?

I have a Windows 8.1 broadcasting computer running Wirecast, that will crash occasionally. (Always at the worst moment :P ). I looked in the event viewer, and I am seeing SideBySide errors like this ...
0
votes
0answers
15 views

Windows Logging Events/Actions - how to/where?

I've known for a while that Windows had this awesome feature where you could see what file was accessed, where and what happened to it. I was wondering if there's a way I could see only a part of ...
0
votes
1answer
33 views

Is there any eventlog entry that shows the startup programs execution

I am running a selfprogrammed program on startup, or atleast, that is what I want to do. Execution doesn't seem to take place, even the built in logging to textfile does not happen. The program is ...
0
votes
1answer
73 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
0
votes
1answer
15 views

Offline Windows Event ID Solution?

In my work i have many buildings with no internet , is there a program or an offline database for errors with event ID for Microsoft , so that will save my time for calling my assistants to search for ...
1
vote
1answer
100 views

Is there anyway to see when a Windows firewall rule was created/enabled using PowerShell v2 or CMD?

I have been poking around the interwebs but I cannot seem to find a definitive answer to this question. I am forced to work with PowerShell v2. I know that using the following command will give me a ...
0
votes
1answer
33 views

Where to check Windows service startup history

I suspect one of important services did not start properly on last Windows 7 restart. I have searched eventlogs but there is so many places to search. Is there some place in eventlogs where at least ...
5
votes
1answer
106 views

How can I determine who is connected to event log remotely?

Is there a way to figure out which user and/or which computer is remotely accessing my computer's Windows event log files? These accesses are locking applications on the local computer and thereby ...
0
votes
0answers
484 views

Windows 8 very slow boot time and warning with event ID 153

I have an Acer aspire 6920g notebook. I use this old laptop just for some basic tasks and testing. Currently it is dual boot Windows 8 and Ubuntu. When I turn it on the first time I log into Windows I ...
0
votes
0answers
266 views

Acer Aspire Timeline Ultra M3-581TG Laptop. It turned off automatically without warning

I have a laptop : Acer Aspire Timeline Ultra M3-581TG Laptop, using Windows 7 Home Premium 64 bit, 4GB RAM, Core i5 It turned off automatically without warning. There was no shutdown procedure, ...
2
votes
1answer
36 views

Is there a log I can see the first time I unlock my machine every day?

I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up? If I examine ...
3
votes
2answers
96 views

Equivalent of Event Log in Linux

Is there an equivalent to the Windows Event Log in Linux? When services crash or processes running in disconnected session explode, where's the problem logged to? More specifically, if a Java JVM app ...
0
votes
0answers
44 views

Interpreting event log of Windows XP

I enabled auditing on a folder on a machine running Windows XP Embedded. Trying to read the security log (or any log for that matter), I get the following description for most events: The description ...
7
votes
1answer
498 views

Did my computer unlock itself?

I woke up around noon to find my computer unlocked, despite having remembered locking it the previous night and not using it since. I checked the security log, and saw a "logon" event from 11:16 AM. ...
0
votes
0answers
37 views

GUI universal timestamp-savvy log viewer

How to view some log file where each entry has a date or timestamp in GUI way? Example of log: 1390406139.123 msg1 1390406139.324 msg2 1390406139.326 msg2 1390406139.329 msg2 1390406139.332 msg2 ...
1
vote
1answer
46 views

Getting Microsoft Security Essentials to alert me when a threat has been found

Is there a way of getting Microsoft Security Essentials to alert me when a threat has been found? I recently went through the log tab of Windows Defender and found a number of threats in the ...
0
votes
0answers
36 views

How can I log process creation w/ parameters in Windows

We need to log all process creation on a Windows 7 machine. We already know about enabling Audit Process Creation events on Group Policy, but we need the most information about it we can get. The most ...
0
votes
1answer
289 views

Surface Pro (W8.1) shut down after WindowsUpdateClient events

My Surface Pro 2 running Windows 8.1 shut down last night for no apparent reason. Between 9:32 PM and 9:36 PM the eventlog logged this (red) error: The machine-default permission settings do not ...
0
votes
0answers
49 views

Advanced Filter for Windows Task Scheduler

I am trying to schedule a task whenever I insert a disk into an external HDD drive (Delll RD1000). The drive device issues an Application event with a common Source value for all events (whether it ...
0
votes
1answer
62 views

Route Events Recorded in System Event Log to Custom Event Log

I have an instance of Windows Server 2008 running some specific services that support my application. There are events within the Windows Events System Log generated for my services but by other ...
2
votes
1answer
26 views

Some sort of bootlog or system info log in Windows 7

I was wondering if there is some sort of "Bootlog" file or anything similar in which I can (at least) see when the computer was booted. So at what date and time that happened. So basically I need a ...
2
votes
1answer
956 views

Is there a log file for RDP connections (with system-name)

Is there any possible way to know the system name of the system which has taken the system remotely? From the logs we are able to know the username (but these are generic login IDs) and the IP (but we ...
0
votes
1answer
147 views

Process Monitor capture filter (or scripting)

As you know, Microsoft distributes the Russinovich extremely powerful process monitor. It captures a lot of system events and has a filter to show only some of them. I want to record a rare fault at ...
0
votes
2answers
85 views

Event log monitoring tool [closed]

Presently, we have more than 25 servers in our network and we check the event logs for each server once in a week to find out events related to application, system warnings, errors etc. This task ...
0
votes
0answers
9 views

Eventtrigers on Windows 7 console-based

In my Company I have to set up Event-Triggers. We want to monitor our Event-Logs in a lightweight and easy way. As a Requirement from the management we have to use the System-Tools. So I found the ...
0
votes
0answers
57 views

The following boot-start or system-start driver(s) failed to load: Toslde

I got the following the error in Event Viwer in WinXP SP3 Pro OS. Also I've been using Compaq 610 notebook. Installed latest update. The following boot-start or system-start driver(s) failed to load: ...
0
votes
0answers
69 views

Windows Login Failure

I'm getting an error in the Event Viewer, which is also generating a lot of Logon Failure messages on our syslog server. Pretty much stuck on how to resolve. EventID: 536 Logon Type: 3 Reason: The ...
1
vote
1answer
106 views

Windows 7 OK button on Copy To dialog doesn't copy profile

So I am attempting to copy a User Profile to the default profile. I am using WinSpy++ to enable the disabled "Copy To" button - this process works on a stock laptop I have here. However, this does ...
1
vote
1answer
302 views

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do ...
0
votes
0answers
36 views

how to avoid event log deletion after shutdown in vmware?

I have a VMWare Esxi host which shutdowns suddenly and all the event logs are deleted by default so I can't find out what's the problem. How can I avoid event logs deletion after shutdown?
1
vote
0answers
50 views

How to check history of a particular software start and close event on windows7

I have used event viewer to check system log in but how to check if I want to see if someone opened visual studio on system? I think its info should be in event viewer but I am not sure. I have ...
1
vote
1answer
2k views

Retrieving last Login and Logout time in windows

How do I get the last login and logout time of a Windows user using a VB script or command? Tried using C:\> net user username | findstr /B /C:"Last logon" but it says username could not be found. ...
0
votes
0answers
118 views

Windows print event (id20) occurring every time user prints

I have a relatively small network here with a print server, and only one user seems to have this problem. Every time he goes to print, this warning pops up despite having installed the proper drivers ...
0
votes
2answers
3k views

Name resolution DNS Client Event, DNS servers not responding, with internet disconnects

I have a really small network in my house, with only three computers. Recently I've experienced my computer disconnecting from the internet for 3-5 seconds, and it only happens two or three times a ...
0
votes
2answers
66 views

Log of installations in XP?

Does XP keep a log of application installations with version numbers of the installations? I would like to know when MSI based installations took place and what versions were installed.
2
votes
2answers
45 views

Figuring out which files where skipped during drag & drop

I just did a drag & drop on a windows system to move a large number of files. During this move there were a few errors involving corrupt files and other issues. Since I was doing this overnight I ...
-1
votes
1answer
28 views

Error installing service, cant access/edit security log? [closed]

I'm trying to install a proprietary service on a client machine and I continue to run into the same issue I've checked all the user permissions even though I'm on an admin account. I also checked ...
2
votes
4answers
2k views

Does Windows log programs that have been run/called?

In Windows, is there a log that records what programs were run/called? While browsing the internet, viewing a static page with no ads, mouse clicks, keypresses, or miscellaneous ...
1
vote
1answer
805 views

What is the trailing “\D” in Windows Event Log disk error details?

Sometimes in the Windows Event Log you may see an error or warning about disk problems regarding something like: \Device\Harddisk0\D. Presumably, the Harddisk0 refers to the first physical drive as ...
0
votes
1answer
133 views

Is there a way to access a log of all recent activity that happened on my computer (MB Air)?

So I logged onto this unrestricted WiFi network, and I just want to be safe and make sure no one has been messing around on my computer. Anyone know a way to access a log of all recent activity on my ...
0
votes
1answer
295 views

Event ID: 7016 LitModeCtrl service has reported an invalid current state 32

I am getting all the time the below error in Windows Event Viewer. Throughout the web a lot of people get this error but there are no solutions to it. I was getting the error when i was using Windows ...
0
votes
2answers
214 views

Lenovo Power Dial Software causing Errors

I am using Windows 7 Professional 64 Bit Lenovo IdeaCentre K330. Recently i checked my Windows Event Viewer and i see that I have got a lot of the following error's: SideBySide Event ID: 33 ...
0
votes
1answer
216 views

Window 7 Event Log Freezing. How to Fix?

When you open the event log, it freeze for several seconds. and a prompt comes out say it's not responding. but if you ignore it and wait for several seconds, it will resume normal. And you will found ...
0
votes
1answer
119 views

Powershell script hogging CPU resources

My computer is a HP laptop running Windows 7 64-bit. A Google search looking for a solution to generate an event in the eventlog any time I switch from AC to battery or vice versa, landed me to: ...
0
votes
1answer
423 views

Windows 7 PC crashes / stops upon reboot

I have an Hewlett Packard (fairly basic) Windows 7 PC, that crashed (no blue screen, the screen simply went black with no response from any peripherals) and then once the machine is powered off and ...
0
votes
2answers
742 views

Log screensaver activity

I'd like to know if there's any way to see logs of the screensaver activity. Something like that: 02/02/2013 10:16:47 Screensaver started 02/02/2013 10:17:23 Screensaver stopped I'm running Win7 ...
1
vote
0answers
82 views

Windows Event Forwarding between two computer out of a domain

I've got two computers and I want to set up event forwarding between them. Source computer is out of a domain, another is in some Domain. I tried to configure source initiated event subscrption but it ...