The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
14 views

Show details on Windows and Ubuntu boot screens?

I want the boot screens (at 640x480 resolution) to show a scrolling list of startup events, along with: "per-event" and "total" progress bars, each with percentages and "number of drivers ...
1
vote
1answer
24 views

Show really all events from the Windows event log

I can make a custom filter for Windows event log to include really everything from all sources. But when I try to open it, it tells me the filter is too long (error 1734) and I cannot use it. I'm ...
0
votes
1answer
19 views

Does Windows log its tasks and events?

There is a computer in my network at work of which the settings somehow have changed. Either someone changed something or it changed by itself. Is there any log or event manager to have a look at what ...
0
votes
0answers
18 views

How to check the event log (if any) for network failure?

Suppose, when you leave your computer running while it's connected to internet and after a while if your WiFi modem freezes in the middle, then there would be a "Limited or No Network connectivity" ...
0
votes
0answers
15 views

Write to Windows Event Log from Linux

I have System Center Orchestrator setup to monitor a Windows Event Log for particular events and then run a runbook when they occur. It works well but I'd like to be able to feed in data from my ...
1
vote
1answer
34 views

How to log a shutdown caused from overheating or overheated components?

On a Windows 7 SP1 machine I would like to know how I could reliably log a shutdown that was caused exclusively from overheated components of the machine. Since the component that overheats must send ...
0
votes
0answers
10 views

View multiple Event Viewer logs From USB

I've copied the entire Windows event viewer log folder onto a USB, and I'm trying to view them in an Event Viewer on another PC, but I can only open one log at a time. Is there a way that I can open ...
0
votes
1answer
16 views

How to make wevtutil tool return results in UTF-8 format?

I'm writing a script that requires me to look up a specific event in the Windows Event Log using wevtutil tool. The command line goes as such: wevtutil qe System ...
0
votes
1answer
33 views

How to log executed batch files?

Let's say I executed 5 batch files yesterday and now I want to know the order of the execution of the files. Does Windows log the execution, maybe in Windows Event Logs or something? Or is there any ...
0
votes
1answer
59 views

How can I change the port of the Event Log on Windows 7

I have following problem. I have a Linux device connected to a PC over a USB with pipe that is configured as network device and is correctly recognized by Win7 in device manager. This Linux device ...
1
vote
2answers
101 views

Export Windows XP event logs cmd

I need to export a specific Windows XP event log from the eventviewer to a ".txt" file. My scenario is that the user programs a chkdsk to be execute on next reboot into a remote machine, and after ...
0
votes
0answers
17 views

Chrome Extension to record user events in a webpage?

Is there any Google Chrome Extensions that record the user doing events and display as a template of what are the events occurred in the page. For example , if a user goes through certain links by ...
0
votes
1answer
33 views

Tracing storage media ejects and disconnects

I had a SD card that I kept permanently plugged into my laptop. Had, until I noticed it was missing this week. I don't know when exactly it fell out, the laptop may or may not have been in suspend at ...
0
votes
0answers
10 views

Audit logon events with password

I configured my server so it would show audit logon events in case of Failure. Now I want to also record password. Somebody is trying to hack my server. In the event log I only see username which the ...
0
votes
0answers
16 views

Run script after Suricata drops or alarms

I have a Suricata IPS. I want after droping some packets, block their IP in my other servers. I have the command needed to block them. I just don't know how to parse new lines at fast.log and ...
10
votes
2answers
37k views

Upgrade to Windows 10 Pro, version 1511, 10586 errors with 0x8024200D

I have seen a few people with this problem on forums, but nobody seems to have a solution yet. Windows says I should restart because I have an update pending (this is 10586). During restart there is ...
0
votes
0answers
54 views

Access Mask filter in Event log XML not working

I'm trying to monitor folder creations and deletions using a filesystem auditing and a custom XML filter in the Windows Event Viewer. The XML is as below: <QueryList> <Query Id="0" ...
0
votes
0answers
132 views

If ESENT complains that it cannot create its logfile, is it avoidable?

In my installation of Windows 10 on a fairly new machine that shipped with it, I get a lot of errors in my eventvwr log, and some of them I feel are indicative of why my system hits 100% disk use for ...
0
votes
2answers
52 views

Windows 7 Home Premium: Event ID 4624: Someone logged in when I was away

I know for certain that I was away from my Windows 7 Home Premium laptop between 12:35 and 14:37. But the eventvwr.exe shows the following: 28/10/2015 14:54:25 Event ID 4624 (access type: 2) ...
1
vote
1answer
67 views

Difference between Windows events 4801 and 4624

(for background, see: In Windows 7, How to query times, when the computer was locked?) It seems that there are two entirely separate events that may be generated in the windows event log when a ...
2
votes
1answer
91 views

Windows 7 (Home Premium): eventvwr.exe: How to log workstation locking and unlocking and screensaver invoked and dismissed events

I have found the following information pertaining to when a user starts and stops interacting with a Windows 7 Home Premium 64-bit PC. Theoretically, these events can be viewed in eventvwr.exe when ...
0
votes
0answers
18 views

Black screens Logs collector, how?

Hello i searching for way to collect informations about my windows 7 black screens errors. i got randomly black screen and only hard reset help. but the black screen dont give me a error, so i need to ...
1
vote
1answer
44 views

How can I see which programs were ran by the user?

Programs & Features (or even better Nirsoft's MyUninstaller) tell me the program installed, and I can accessed some cached installation data, but is there a way to get a log of the executables ...
0
votes
1answer
52 views

Why are there so many unexpected shutdowns in the event log?

I was looking through my shutdown history in the event log today when I noticed that there was an "Unexpected Shutdown" (event ID 6008) logged way more often than I can ever recall there being ...
0
votes
0answers
15 views

Two or more IDs in event viewer with filter on Windows XP

Is there a way to filter 2 or more ID events. In win 7 you can use ","(e.g. 6006,6005). On the other side in XP I can't use comma to separate IDs, "unexpected input" or error like that is popping up ...
3
votes
1answer
214 views

Disable windows powershell event logging

I'm using PsExec to run PowerShell scripts on remote machines and as a side effect of this, the "Windows PowerShell" event-log (found in the Event Viewer under "Applications and Services Logs") is ...
6
votes
1answer
2k views

Audit failure 5061 after logging in to Windows 10

Logging in to Windows 10 Build 10547 I see for a split second a message box pop up. There's no time to read it as the login succeeds. In the event log I see: Audit failure 5061 with a task ...
0
votes
1answer
57 views

see all logins and attempts in windows 7

There any way to get the dates and times of logins on a computer with windows 7 (Local and Remote) I read this article, but in events viewer I cant see any login (All events are other types) We ...
1
vote
0answers
37 views

Windows 8 Boot Reason

My friend asked me to troubleshoot an issue where his Windows 8.1 desktop would boot up automatically roughly 24 hours after previous shutdown. I'm really sceptical about it but the Event Viewer log ...
3
votes
1answer
128 views

How do I Defrag/Optimize a Windows 8.1 Volume which has no Drive Letter? Does it matter?

I have a Dell Inspiron Ultrabook running Windows 8.1 (64-bit). In File Explorer, I click on Drive C Properties -> Tools -> Optimize. There I see 4 drives listed as follows: OS (C:) -- OK (0% ...
0
votes
1answer
17 views

How do I log file writes to a directory on Windows Server 2003?

I handle some network administration for a small business. Recently, I discovered a set of windows backup files in a directory that was being regularly added to (multiple times daily) on our backup ...
0
votes
0answers
873 views

Windows 10 constant graphics driver crashing for no apparent reason

I recently bought asus gtx 750 oc card, installed it with its driver on windows 7 and it worked fine. Indidntnuse it too long but longer than I could run it on windows 10 without a problem. ...
1
vote
1answer
15 views

USB Event Log when computer powered down

I had a GoPro stolen from my computer at my work desk last night (I'm assuming). The GoPro was connected to one of my USB ports, and I was wondering if Windows tracked that information somehow? I have ...
2
votes
1answer
5k views

A series of DeviceSetupManager warnings in Windows 10 event logs

I have been "cleaning up" Windows 10, and I'm noticing a series of warnings in the Event Viewer every time I start Windows. And they are in the following order. Event 202, DeviceSetupManager "The ...
1
vote
0answers
25 views

Stations taking too much time log in the field [closed]

Last week I'm having a lot of complaints that computers are taking too much time to log in the field. Another error that occurs is that machines that were recently that added to the domain can not ...
2
votes
3answers
524 views

Windows 7 losing network connection randomly when other PC's are connected

I'm having quite an annoying problem which I haven't been able to find a solution for yet. I hope you can help me. When my PC was using my home network and was connected to the internet through a ...
0
votes
1answer
157 views

Determining Cause of Unexpected Shutdown on Windows 8.1

I left my computer unattended a little over half an hour while it was compressing some files. I came back, and my computer had apparently shut off. I looked at the Event Logs, and it told me that The ...
2
votes
1answer
26 views

How can I receive e-mails based on certain Windows Firewall events?

Is it possible to receive an e-mail when Windows Firewall logs certain events (such as an inbound connection being accepted for example)?
2
votes
1answer
395 views

Many successful logon and logoff requests in Windows Event Viewer

I'm getting thousands of logon and logoff requests every day from the same computer in the local network. It seems the computer is connecting from a different port every time. What could be the cause ...
1
vote
1answer
290 views

Equivalent of wevtutil in powershell?

wevtutil is a command in cmd for displaying Windows logs in different formats. What is the equivalent cmdlet in Powershell?
1
vote
1answer
38 views

Searching for a GPO's Name in a Windows 7 Event Log?

Is there a way to search for a particular string (a GPO) in a Windows Event Log Message? Instead of searching for an Event ID or filtering by event type?
0
votes
1answer
52 views

Get Notified of Errors in Windows Event Log

I wrote a powershell script to make a database dump that I plan on having run nightly with Windows Task Scheduler. It outputs to a log file so I can make sure everything is working, but I want to be ...
0
votes
0answers
58 views

tracking oracle database activities in security/system logs of windows server 2003

Can database activity like create or drop tables and packages be tracked in the security/system logs of windows 2003 server for the oracle database 10.2.0.4? Can purging of oracle log, n case the file ...
0
votes
0answers
145 views

How To Read NFC event?

I have an external NFC reader connected via usb to a Windows-7, with the drivers installed. It seems to work, as when I place a NFC card on the reader its led changes from red to green and the PC ...
0
votes
0answers
27 views

managing event viewer remotely in windows 2003

Same user is configured as administrator on all the servers in one domain at windows 2003 server. However, the account is not the domain admin. Can security logs be managed or cleared remotely from ...
0
votes
1answer
182 views

Windows security log shows mysterious user logins

In troubleshooting an unrelated problem, I noticed that one user's (Jeny) Windows security log showed several logins and logoffs from another user (Holly). Holly confirms that she logged into her ...
0
votes
2answers
324 views

ID disk from event message [duplicate]

I have the following event in Event Viewer: "The driver detected a controller error on \Device\Harddisk6\DR19." Log Name: System Source: Disk EventID: 11 Level: Error How do I know what disk this ...
1
vote
1answer
268 views

How to target an event by the process name as well as the ID?

I have managed to create a scheduled task that will be triggered by an event ID. For example, I have a task that will run winver.exe whenever event ID 4688 is logged. So if I run notepad.exe from Run ...
0
votes
0answers
28 views

security log events management in windows 2003

Login, Clear Logs and log off events in Windows 2003 when does this happen and what are the IDs for these events ? what is the system login? In an event when administrator account and password are ...
0
votes
1answer
218 views

Mysterious event log message

I saw this message in my event log today. I tried searching on it without much success. - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider ...