The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
4 views

How can you grant the ApplicationPoolIdentity access to write to the Application Event Log?

How can you grant the ApplicationPoolIdentity access to write to the Application Event Log?
0
votes
2answers
51 views

Why did my Windows 10 restarted?

I did run my overnight computations and when I came to my computer, it is restarted :-( I would like to find reason why, if it was due to my computation process crashing or some system update. I have ...
1
vote
0answers
23 views

Server Unexpected Shutdown

If you have a Windows server that has an Unexpected Shutdown and there is nothing in the logs (no power failure, critical events or hardware failures), and no memory dump for blue screen then is the ...
0
votes
0answers
12 views

Is there a log in Windows 8.1 which would say when the monitor resolution was changed?

I logged into my computer remotely and have noticed that my screen orientations have changed and I'm missing a monitor. I'd like to take a look at the logs and see when (and maybe how) this occurred. ...
0
votes
0answers
27 views

External Hard Drive Problems in Event Viewer

I'm using a Western Digital My Passport Ultra (2TB) 1.5 years ago and I've recently been seeing a lot of problems with this external drive in event viewer. So far, whenever I connect this to the ...
0
votes
0answers
75 views

Solving Windows 10 “Activation permission for the COM Server application”

On a clean genuine Windows 10 installation, the Event Viewer throws one of these errors every 2-5 minutes: The application-specific permission settings do not grant Local Activation permission ...
2
votes
1answer
35 views

Windows 7 64b - Where did my password vanish to? When did it go poof?

Ok, here's the situation. Update: I have solved the situation My machine is set to log me in automatically after startup, then lock the workstation with a registry entry. If you must know, the ...
0
votes
1answer
16 views

Clear Application Event Log by Source

I've seen various sources suggesting something like this to clear all event logs: wevtutil el | Foreach-Object {Write-Host "Clearing $_"; wevtutil cl "$_"} But what I would like to do is remove ...
0
votes
1answer
126 views

Windows 10 Kernel-Power 41 error after go to sleep

I have a recurring problem with my ASUS G56JR notebook under Windows 10, somehow the the system crashes after to go sleep. When I awake it, the eventlog shows the following: I read a guys problem ...
0
votes
1answer
60 views

How to Reboot and shut down based on Windows Update Status

I am working on Schedule Tasks where I can reboot or shutdown my OS based on Windows Update status. My Setup Run this task weekly on login. This task starts wuauclt.exe /detectnow /updatenow. Then ...
0
votes
0answers
11 views

sp_send_dbmail spamming Event Log

I have some unknown but work-relevant process on my development computer executing every 10 seconds. It calls a stored procedure in SQL Server. Part of this stored procedure is to call ...
0
votes
1answer
38 views

Modifying script to capture login/shutdown times in Windows

For some time now I've been using this script to view my login time for a particular computer: Set objFSO = CreateObject("Scripting.FileSystemObject") Set objFile = objFSO.GetFile("C:\Windows\...
0
votes
0answers
137 views

Error roaming credentials in Windows 10

I recently started getting a series of strange events in Windows 10. There was an error while applying setting unit 879C846CFF67B4C6D3D70C6698FF11D468BBE789 for roaming collection Windows-Credentials....
1
vote
1answer
1k views

Windows 10 ShellExperienceHost crashes

I recently cloned my Windows 10 partition from HDD to SSD. I cannot open the Start Menu, Notifications, or anything that uses ShellExperienceHost. This includes things like the Calculator app, Edge ...
3
votes
1answer
3k views

Identifying Windows 10 \Device\Harddisk1\DR2

I'm getting errors in Windows 10's event log stating \Device\Harddisk1\DR2 drive controller is having a problem. I know that the hard disk numbers depend on the BIOS and do not match the physical ...
0
votes
0answers
201 views

How to Grant Write Access to Windows Server 2012 R2 Application Event Log

I'm running Windows Server 2012 R2 and under that I'm running VMWare Workstation Pro. When Workstation is installed, the user Group __vmware__ is created for VMWare Workstation users. I've added my ...
0
votes
1answer
24 views

How can I find out when I logged in without administrator access?

How can I find out when I logged in without administrator access on Win 7? It doesn't let me open the Security Log in Event Viewer. Is there another way to find this out?
1
vote
1answer
150 views

VeraCrypt + CLI + /password + turned off log?

VeraCrypt can be managed by CLI and bash/batch scripts on Linux/Windows respectively. However, IDRIX emphasizes that command containing password [flag /p, /password (Windows) or --password (Linux)] ...
2
votes
1answer
137 views

What event log should I check for Hardware Changes

Approximately every 10 seconds my PC seems to be adding new hardware then instantly removing it. For example, you know the sound when you insert a new USB device and it starts to look for drivers? It ...
0
votes
0answers
20 views

Show details on Windows and Ubuntu boot screens?

I want the boot screens (at 640x480 resolution) to show a scrolling list of startup events, along with: "per-event" and "total" progress bars, each with percentages and "number of drivers loaded/...
1
vote
1answer
62 views

Show really all events from the Windows event log

I can make a custom filter for Windows event log to include really everything from all sources. But when I try to open it, it tells me the filter is too long (error 1734) and I cannot use it. I'm ...
0
votes
1answer
25 views

Does Windows log its tasks and events?

There is a computer in my network at work of which the settings somehow have changed. Either someone changed something or it changed by itself. Is there any log or event manager to have a look at what ...
0
votes
1answer
73 views

How to check the event log (if any) for network failure?

Suppose, when you leave your computer running while it's connected to internet and after a while if your WiFi modem freezes in the middle, then there would be a "Limited or No Network connectivity" ...
0
votes
0answers
27 views

Write to Windows Event Log from Linux

I have System Center Orchestrator setup to monitor a Windows Event Log for particular events and then run a runbook when they occur. It works well but I'd like to be able to feed in data from my ...
1
vote
1answer
273 views

How to log a shutdown caused from overheating or overheated components?

On a Windows 7 SP1 machine I would like to know how I could reliably log a shutdown that was caused exclusively from overheated components of the machine. Since the component that overheats must send ...
0
votes
0answers
24 views

Keeping track of files across two drives

At work, there is a 450GB network drive (X:) which has served as a dumping-ground for 3 of my underfunded NGO's biggest departments. It needs to be reorganized. Depending on a manager's opinion, a ...
0
votes
0answers
18 views

View multiple Event Viewer logs From USB

I've copied the entire Windows event viewer log folder onto a USB, and I'm trying to view them in an Event Viewer on another PC, but I can only open one log at a time. Is there a way that I can open ...
0
votes
1answer
62 views

How to make wevtutil tool return results in UTF-8 format?

I'm writing a script that requires me to look up a specific event in the Windows Event Log using wevtutil tool. The command line goes as such: wevtutil qe System /q:"*[System[Provider[@Name='...
0
votes
1answer
44 views

How to log executed batch files?

Let's say I executed 5 batch files yesterday and now I want to know the order of the execution of the files. Does Windows log the execution, maybe in Windows Event Logs or something? Or is there any ...
1
vote
1answer
27 views

Are there negative consequences to disabling audit policies?

I'm the sole user of my own laptop running Windows 8.1. After doing a bit of research into this (eg. SuperUser question and Microsoft Technet), I can see how this might be useful for a company laptop. ...
0
votes
1answer
82 views

How can I change the port of the Event Log on Windows 7

I have following problem. I have a Linux device connected to a PC over a USB with pipe that is configured as network device and is correctly recognized by Win7 in device manager. This Linux device ...
1
vote
2answers
244 views

Export Windows XP event logs cmd

I need to export a specific Windows XP event log from the eventviewer to a ".txt" file. My scenario is that the user programs a chkdsk to be execute on next reboot into a remote machine, and after ...
0
votes
0answers
46 views

Chrome Extension to record user events in a webpage?

Is there any Google Chrome Extensions that record the user doing events and display as a template of what are the events occurred in the page. For example , if a user goes through certain links by ...
0
votes
1answer
34 views

Tracing storage media ejects and disconnects

I had a SD card that I kept permanently plugged into my laptop. Had, until I noticed it was missing this week. I don't know when exactly it fell out, the laptop may or may not have been in suspend at ...
0
votes
0answers
14 views

Audit logon events with password

I configured my server so it would show audit logon events in case of Failure. Now I want to also record password. Somebody is trying to hack my server. In the event log I only see username which the ...
0
votes
0answers
47 views

Run script after Suricata drops or alarms

I have a Suricata IPS. I want after droping some packets, block their IP in my other servers. I have the command needed to block them. I just don't know how to parse new lines at fast.log and drop.log,...
18
votes
3answers
57k views

Upgrade to Windows 10 Pro, version 1511, 10586 errors with 0x8024200D

I have seen a few people with this problem on forums, but nobody seems to have a solution yet. Windows says I should restart because I have an update pending (this is 10586). During restart there is ...
0
votes
0answers
153 views

Access Mask filter in Event log XML not working

I'm trying to monitor folder creations and deletions using a filesystem auditing and a custom XML filter in the Windows Event Viewer. The XML is as below: <QueryList> <Query Id="0" Path="...
0
votes
0answers
278 views

If ESENT complains that it cannot create its logfile, is it avoidable?

In my installation of Windows 10 on a fairly new machine that shipped with it, I get a lot of errors in my eventvwr log, and some of them I feel are indicative of why my system hits 100% disk use for ...
0
votes
2answers
96 views

Windows 7 Home Premium: Event ID 4624: Someone logged in when I was away

I know for certain that I was away from my Windows 7 Home Premium laptop between 12:35 and 14:37. But the eventvwr.exe shows the following: 28/10/2015 14:54:25 Event ID 4624 (access type: 2) 28/10/...
1
vote
1answer
172 views

Difference between Windows events 4801 and 4624

(for background, see: In Windows 7, How to query times, when the computer was locked?) It seems that there are two entirely separate events that may be generated in the windows event log when a ...
2
votes
1answer
150 views

Windows 7 (Home Premium): eventvwr.exe: How to log workstation locking and unlocking and screensaver invoked and dismissed events

I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe when ...
0
votes
0answers
23 views

Black screens Logs collector, how?

Hello i searching for way to collect informations about my windows 7 black screens errors. i got randomly black screen and only hard reset help. but the black screen dont give me a error, so i need to ...
1
vote
1answer
57 views

How can I see which programs were ran by the user?

Programs & Features (or even better Nirsoft's MyUninstaller) tell me the program installed, and I can accessed some cached installation data, but is there a way to get a log of the executables ...
0
votes
1answer
159 views

Why are there so many unexpected shutdowns in the event log?

I was looking through my shutdown history in the event log today when I noticed that there was an "Unexpected Shutdown" (event ID 6008) logged way more often than I can ever recall there being ...
0
votes
0answers
17 views

Two or more IDs in event viewer with filter on Windows XP

Is there a way to filter 2 or more ID events. In win 7 you can use ","(e.g. 6006,6005). On the other side in XP I can't use comma to separate IDs, "unexpected input" or error like that is popping up ...
3
votes
1answer
601 views

Disable windows powershell event logging

I'm using PsExec to run PowerShell scripts on remote machines and as a side effect of this, the "Windows PowerShell" event-log (found in the Event Viewer under "Applications and Services Logs") is ...
6
votes
1answer
3k views

Audit failure 5061 after logging in to Windows 10

Logging in to Windows 10 Build 10547 I see for a split second a message box pop up. There's no time to read it as the login succeeds. In the event log I see: Audit failure 5061 with a task ...
0
votes
1answer
82 views

see all logins and attempts in windows 7

There any way to get the dates and times of logins on a computer with windows 7 (Local and Remote) I read this article, but in events viewer I cant see any login (All events are other types) We ...
1
vote
0answers
47 views

Windows 8 Boot Reason

My friend asked me to troubleshoot an issue where his Windows 8.1 desktop would boot up automatically roughly 24 hours after previous shutdown. I'm really sceptical about it but the Event Viewer log ...