The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
6 views

sp_send_dbmail spamming Event Log

I have some unknown but work-relevant process on my development computer executing every 10 seconds. It calls a stored procedure in SQL Server. Part of this stored procedure is to call ...
0
votes
1answer
26 views

Modifying script to capture login/shutdown times in Windows

For some time now I've been using this script to view my login time for a particular computer: Set objFSO = CreateObject("Scripting.FileSystemObject") Set objFile = ...
0
votes
0answers
28 views

Error roaming credentials in Windows 10

I recently started getting a series of strange events in Windows 10. There was an error while applying setting unit 879C846CFF67B4C6D3D70C6698FF11D468BBE789 for roaming collection ...
1
vote
1answer
165 views

Windows 10 ShellExperienceHost crashes

I recently cloned my Windows 10 partition from HDD to SSD. I cannot open the Start Menu, Notifications, or anything that uses ShellExperienceHost. This includes things like the Calculator app, Edge ...
3
votes
1answer
762 views

Identifying Windows 10 \Device\Harddisk1\DR2

I'm getting errors in Windows 10's event log stating \Device\Harddisk1\DR2 drive controller is having a problem. I know that the hard disk numbers depend on the BIOS and do not match the physical ...
0
votes
0answers
53 views

How to Grant Write Access to Windows Server 2012 R2 Application Event Log

I'm running Windows Server 2012 R2 and under that I'm running VMWare Workstation Pro. When Workstation is installed, the user Group __vmware__ is created for VMWare Workstation users. I've added my ...
0
votes
1answer
24 views

How can I find out when I logged in without administrator access?

How can I find out when I logged in without administrator access on Win 7? It doesn't let me open the Security Log in Event Viewer. Is there another way to find this out?
1
vote
0answers
36 views

VeraCrypt + CLI + /password + turned off log?

VeraCrypt can be managed by CLI and bash/batch scripts on Linux/Windows respectively. However, IDRIX emphasizes that command containing password [flag /p, /password (Windows) or --password (Linux)] ...
1
vote
1answer
50 views

What event log should I check for Hardware Changes

Approximately every 10 seconds my PC seems to be adding new hardware then instantly removing it. For example, you know the sound when you insert a new USB device and it starts to look for drivers? It ...
0
votes
0answers
20 views

Show details on Windows and Ubuntu boot screens?

I want the boot screens (at 640x480 resolution) to show a scrolling list of startup events, along with: "per-event" and "total" progress bars, each with percentages and "number of drivers ...
1
vote
1answer
35 views

Show really all events from the Windows event log

I can make a custom filter for Windows event log to include really everything from all sources. But when I try to open it, it tells me the filter is too long (error 1734) and I cannot use it. I'm ...
0
votes
1answer
24 views

Does Windows log its tasks and events?

There is a computer in my network at work of which the settings somehow have changed. Either someone changed something or it changed by itself. Is there any log or event manager to have a look at what ...
0
votes
1answer
38 views

How to check the event log (if any) for network failure?

Suppose, when you leave your computer running while it's connected to internet and after a while if your WiFi modem freezes in the middle, then there would be a "Limited or No Network connectivity" ...
0
votes
0answers
19 views

Write to Windows Event Log from Linux

I have System Center Orchestrator setup to monitor a Windows Event Log for particular events and then run a runbook when they occur. It works well but I'd like to be able to feed in data from my ...
1
vote
1answer
89 views

How to log a shutdown caused from overheating or overheated components?

On a Windows 7 SP1 machine I would like to know how I could reliably log a shutdown that was caused exclusively from overheated components of the machine. Since the component that overheats must send ...
0
votes
0answers
17 views

Keeping track of files across two drives

At work, there is a 450GB network drive (X:) which has served as a dumping-ground for 3 of my underfunded NGO's biggest departments. It needs to be reorganized. Depending on a manager's opinion, a ...
0
votes
0answers
16 views

View multiple Event Viewer logs From USB

I've copied the entire Windows event viewer log folder onto a USB, and I'm trying to view them in an Event Viewer on another PC, but I can only open one log at a time. Is there a way that I can open ...
0
votes
1answer
34 views

How to make wevtutil tool return results in UTF-8 format?

I'm writing a script that requires me to look up a specific event in the Windows Event Log using wevtutil tool. The command line goes as such: wevtutil qe System ...
0
votes
1answer
38 views

How to log executed batch files?

Let's say I executed 5 batch files yesterday and now I want to know the order of the execution of the files. Does Windows log the execution, maybe in Windows Event Logs or something? Or is there any ...
1
vote
1answer
27 views

Are there negative consequences to disabling audit policies?

I'm the sole user of my own laptop running Windows 8.1. After doing a bit of research into this (eg. SuperUser question and Microsoft Technet), I can see how this might be useful for a company laptop. ...
0
votes
1answer
68 views

How can I change the port of the Event Log on Windows 7

I have following problem. I have a Linux device connected to a PC over a USB with pipe that is configured as network device and is correctly recognized by Win7 in device manager. This Linux device ...
1
vote
2answers
159 views

Export Windows XP event logs cmd

I need to export a specific Windows XP event log from the eventviewer to a ".txt" file. My scenario is that the user programs a chkdsk to be execute on next reboot into a remote machine, and after ...
0
votes
0answers
34 views

Chrome Extension to record user events in a webpage?

Is there any Google Chrome Extensions that record the user doing events and display as a template of what are the events occurred in the page. For example , if a user goes through certain links by ...
0
votes
1answer
33 views

Tracing storage media ejects and disconnects

I had a SD card that I kept permanently plugged into my laptop. Had, until I noticed it was missing this week. I don't know when exactly it fell out, the laptop may or may not have been in suspend at ...
0
votes
0answers
13 views

Audit logon events with password

I configured my server so it would show audit logon events in case of Failure. Now I want to also record password. Somebody is trying to hack my server. In the event log I only see username which the ...
0
votes
0answers
31 views

Run script after Suricata drops or alarms

I have a Suricata IPS. I want after droping some packets, block their IP in my other servers. I have the command needed to block them. I just don't know how to parse new lines at fast.log and ...
14
votes
3answers
47k views

Upgrade to Windows 10 Pro, version 1511, 10586 errors with 0x8024200D

I have seen a few people with this problem on forums, but nobody seems to have a solution yet. Windows says I should restart because I have an update pending (this is 10586). During restart there is ...
0
votes
0answers
101 views

Access Mask filter in Event log XML not working

I'm trying to monitor folder creations and deletions using a filesystem auditing and a custom XML filter in the Windows Event Viewer. The XML is as below: <QueryList> <Query Id="0" ...
0
votes
0answers
197 views

If ESENT complains that it cannot create its logfile, is it avoidable?

In my installation of Windows 10 on a fairly new machine that shipped with it, I get a lot of errors in my eventvwr log, and some of them I feel are indicative of why my system hits 100% disk use for ...
0
votes
2answers
71 views

Windows 7 Home Premium: Event ID 4624: Someone logged in when I was away

I know for certain that I was away from my Windows 7 Home Premium laptop between 12:35 and 14:37. But the eventvwr.exe shows the following: 28/10/2015 14:54:25 Event ID 4624 (access type: 2) ...
1
vote
1answer
107 views

Difference between Windows events 4801 and 4624

(for background, see: In Windows 7, How to query times, when the computer was locked?) It seems that there are two entirely separate events that may be generated in the windows event log when a ...
2
votes
1answer
122 views

Windows 7 (Home Premium): eventvwr.exe: How to log workstation locking and unlocking and screensaver invoked and dismissed events

I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe when ...
0
votes
0answers
23 views

Black screens Logs collector, how?

Hello i searching for way to collect informations about my windows 7 black screens errors. i got randomly black screen and only hard reset help. but the black screen dont give me a error, so i need to ...
1
vote
1answer
52 views

How can I see which programs were ran by the user?

Programs & Features (or even better Nirsoft's MyUninstaller) tell me the program installed, and I can accessed some cached installation data, but is there a way to get a log of the executables ...
0
votes
1answer
78 views

Why are there so many unexpected shutdowns in the event log?

I was looking through my shutdown history in the event log today when I noticed that there was an "Unexpected Shutdown" (event ID 6008) logged way more often than I can ever recall there being ...
0
votes
0answers
16 views

Two or more IDs in event viewer with filter on Windows XP

Is there a way to filter 2 or more ID events. In win 7 you can use ","(e.g. 6006,6005). On the other side in XP I can't use comma to separate IDs, "unexpected input" or error like that is popping up ...
3
votes
1answer
415 views

Disable windows powershell event logging

I'm using PsExec to run PowerShell scripts on remote machines and as a side effect of this, the "Windows PowerShell" event-log (found in the Event Viewer under "Applications and Services Logs") is ...
6
votes
1answer
2k views

Audit failure 5061 after logging in to Windows 10

Logging in to Windows 10 Build 10547 I see for a split second a message box pop up. There's no time to read it as the login succeeds. In the event log I see: Audit failure 5061 with a task ...
0
votes
1answer
65 views

see all logins and attempts in windows 7

There any way to get the dates and times of logins on a computer with windows 7 (Local and Remote) I read this article, but in events viewer I cant see any login (All events are other types) We ...
1
vote
0answers
43 views

Windows 8 Boot Reason

My friend asked me to troubleshoot an issue where his Windows 8.1 desktop would boot up automatically roughly 24 hours after previous shutdown. I'm really sceptical about it but the Event Viewer log ...
0
votes
0answers
87 views

Windows 2012 Server - Audit Who Logged User Off

Is there a way to tell who logged a user off with Windows 2012 Server? For example, I use rdp to log into a box that as multiple admins, there are some scripts that run under a specific user. The ...
3
votes
1answer
161 views

How do I Defrag/Optimize a Windows 8.1 Volume which has no Drive Letter? Does it matter?

I have a Dell Inspiron Ultrabook running Windows 8.1 (64-bit). In File Explorer, I click on Drive C Properties -> Tools -> Optimize. There I see 4 drives listed as follows: OS (C:) -- OK (0% ...
0
votes
1answer
20 views

How do I log file writes to a directory on Windows Server 2003?

I handle some network administration for a small business. Recently, I discovered a set of windows backup files in a directory that was being regularly added to (multiple times daily) on our backup ...
0
votes
0answers
1k views

Windows 10 constant graphics driver crashing for no apparent reason

I recently bought asus gtx 750 oc card, installed it with its driver on windows 7 and it worked fine. Indidntnuse it too long but longer than I could run it on windows 10 without a problem. ...
1
vote
1answer
15 views

USB Event Log when computer powered down

I had a GoPro stolen from my computer at my work desk last night (I'm assuming). The GoPro was connected to one of my USB ports, and I was wondering if Windows tracked that information somehow? I have ...
2
votes
1answer
6k views

A series of DeviceSetupManager warnings in Windows 10 event logs

I have been "cleaning up" Windows 10, and I'm noticing a series of warnings in the Event Viewer every time I start Windows. And they are in the following order. Event 202, DeviceSetupManager "The ...
1
vote
0answers
25 views

Stations taking too much time log in the field [closed]

Last week I'm having a lot of complaints that computers are taking too much time to log in the field. Another error that occurs is that machines that were recently that added to the domain can not ...
2
votes
3answers
868 views

Windows 7 losing network connection randomly when other PC's are connected

I'm having quite an annoying problem which I haven't been able to find a solution for yet. I hope you can help me. When my PC was using my home network and was connected to the internet through a ...
0
votes
1answer
201 views

Determining Cause of Unexpected Shutdown on Windows 8.1

I left my computer unattended a little over half an hour while it was compressing some files. I came back, and my computer had apparently shut off. I looked at the Event Logs, and it told me that The ...
2
votes
1answer
27 views

How can I receive e-mails based on certain Windows Firewall events?

Is it possible to receive an e-mail when Windows Firewall logs certain events (such as an inbound connection being accepted for example)?