The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
107 views

Windows 2012 Server - Audit Who Logged User Off

Is there a way to tell who logged a user off with Windows 2012 Server? For example, I use rdp to log into a box that as multiple admins, there are some scripts that run under a specific user. The ...
3
votes
1answer
231 views

How do I Defrag/Optimize a Windows 8.1 Volume which has no Drive Letter? Does it matter?

I have a Dell Inspiron Ultrabook running Windows 8.1 (64-bit). In File Explorer, I click on Drive C Properties -> Tools -> Optimize. There I see 4 drives listed as follows: OS (C:) -- OK (0% ...
0
votes
1answer
21 views

How do I log file writes to a directory on Windows Server 2003?

I handle some network administration for a small business. Recently, I discovered a set of windows backup files in a directory that was being regularly added to (multiple times daily) on our backup ...
0
votes
0answers
1k views

Windows 10 constant graphics driver crashing for no apparent reason

I recently bought asus gtx 750 oc card, installed it with its driver on windows 7 and it worked fine. Indidntnuse it too long but longer than I could run it on windows 10 without a problem. http://m....
1
vote
1answer
16 views

USB Event Log when computer powered down

I had a GoPro stolen from my computer at my work desk last night (I'm assuming). The GoPro was connected to one of my USB ports, and I was wondering if Windows tracked that information somehow? I have ...
2
votes
1answer
7k views

A series of DeviceSetupManager warnings in Windows 10 event logs

I have been "cleaning up" Windows 10, and I'm noticing a series of warnings in the Event Viewer every time I start Windows. And they are in the following order. Event 202, DeviceSetupManager "The ...
1
vote
0answers
26 views

Stations taking too much time log in the field [closed]

Last week I'm having a lot of complaints that computers are taking too much time to log in the field. Another error that occurs is that machines that were recently that added to the domain can not ...
3
votes
3answers
1k views

Windows 7 losing network connection randomly when other PC's are connected

I'm having quite an annoying problem which I haven't been able to find a solution for yet. I hope you can help me. When my PC was using my home network and was connected to the internet through a ...
0
votes
1answer
232 views

Determining Cause of Unexpected Shutdown on Windows 8.1

I left my computer unattended a little over half an hour while it was compressing some files. I came back, and my computer had apparently shut off. I looked at the Event Logs, and it told me that The ...
2
votes
1answer
28 views

How can I receive e-mails based on certain Windows Firewall events?

Is it possible to receive an e-mail when Windows Firewall logs certain events (such as an inbound connection being accepted for example)?
0
votes
0answers
68 views

File delete audit, Windows 8

I have a shared folder (folderA) and our users must copy some files everyday and after they finish working they have to delete files and when they delete files there must be a record.(for security ...
2
votes
1answer
812 views

Many successful logon and logoff requests in Windows Event Viewer

I'm getting thousands of logon and logoff requests every day from the same computer in the local network. It seems the computer is connecting from a different port every time. What could be the cause ...
2
votes
1answer
561 views

Equivalent of wevtutil in powershell?

wevtutil is a command in cmd for displaying Windows logs in different formats. What is the equivalent cmdlet in Powershell?
1
vote
1answer
41 views

Searching for a GPO's Name in a Windows 7 Event Log?

Is there a way to search for a particular string (a GPO) in a Windows Event Log Message? Instead of searching for an Event ID or filtering by event type?
0
votes
1answer
57 views

Get Notified of Errors in Windows Event Log

I wrote a powershell script to make a database dump that I plan on having run nightly with Windows Task Scheduler. It outputs to a log file so I can make sure everything is working, but I want to be ...
2
votes
0answers
63 views

How come UAC logs are not being stored in Event Viewer?

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
0
votes
0answers
240 views

How To Read NFC event?

I have an external NFC reader connected via usb to a Windows-7, with the drivers installed. It seems to work, as when I place a NFC card on the reader its led changes from red to green and the PC ...
0
votes
1answer
222 views

Windows security log shows mysterious user logins

In troubleshooting an unrelated problem, I noticed that one user's (Jeny) Windows security log showed several logins and logoffs from another user (Holly). Holly confirms that she logged into her ...
0
votes
2answers
461 views

ID disk from event message [duplicate]

I have the following event in Event Viewer: "The driver detected a controller error on \Device\Harddisk6\DR19." Log Name: System Source: Disk EventID: 11 Level: Error How do I know what disk this ...
1
vote
1answer
625 views

How to target an event by the process name as well as the ID?

I have managed to create a scheduled task that will be triggered by an event ID. For example, I have a task that will run winver.exe whenever event ID 4688 is logged. So if I run notepad.exe from Run ...
0
votes
1answer
270 views

Mysterious event log message

I saw this message in my event log today. I tried searching on it without much success. - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> - <System> <Provider ...
0
votes
0answers
46 views

Windows 8.1 freezes due to video card and usually recovers

I have a couple of Radeon video cards (hd6450, hd6670) on win 8.1. Occasionally the screens will go blank and I get a message about recovering from a video card problem. Usually the recovery is ...
0
votes
1answer
75 views

View users login activity

Is there a way from the local event logs of a windows 7 computer to tell when the users logged into the cpu?- I see logon 4624 / logoff 4634 But those seem to be every 30min or so not tied to users ...
0
votes
1answer
78 views

Does Windows log when a user attempts to execute an application that is not on the whitelist?

I have searched Google with several search terms, attempting to discover if Windows logs when a user attempts to run an application that is not whitelisted, and if so, in what event log. Can anyone ...
0
votes
1answer
762 views

Recurring event in Event Log: “Windows Security Center Service could not stop Windows Defender”

I have recently set up a new development machine (Lenovo T440p laptop with Windows 8.1 Pro), and this event keeps getting logged to the Event Log (about once every 2.5 minutes): The Windows Security ...
1
vote
0answers
48 views

Analysis to extract task flows from UI event log

Given a table of UI events, how can I detect task flows, task loops, and behavioural patterns? I'm instrumenting my software to track what the user does. Controls clicked, keys pressed, and so on, ...
1
vote
1answer
539 views

Is there a trace of users killing a process on windows machine

We're debugging a situation in a retail location where the program does a bunch of logging but then everything just stops. it's pretty apparent that the comm to an external web service is taking some ...
1
vote
1answer
179 views

Accessing Server 2008 R2 manual shutdown notes and event logs

When I manually reboot a server I am required to specify a reason for the restart and given the opportunity to provide a comment. How do I review my past shutdown reasons and comments and what is the ...
0
votes
1answer
642 views

How to get the domain controller time sync event?

My computer is part of the domain. Say I manually adjust the clock to be off by 2min. Domain controller will sync this clock with its own at some point. Is it possible to track domain controller time ...
6
votes
3answers
800 views

Blank screen in Windows 8.1

Recently I bought new computer (AMD FX-6300, 8GB RAM, SSD and GTX650 as graphic card). I installed Windows 8.1. At the beginning everything went well. But after one day I have two strange problems. 1)...
1
vote
1answer
3k views

Why is the “Task category” drop down to filter a Windows event log disabled?

I've got a specific "Task category" of Windows log events I'd like to see on their own, but the option to filter by category in the "Filter Current Log" dialog is disabled/greyed out. How can I use it?...
0
votes
1answer
50 views

how do I check, how many times printing command is run on my windows

I have to check for a specific time range, how many times the printing command is executed on my PC/Windows…. Is Operating system make any log of printing commands...? If yes How and where i found it....
1
vote
0answers
613 views

Windows 8 crashing unexpectedly

The computer I use at work sometimes crashes when I'm not near it. The first time it happened the OS crashed dead (even the mouse cursor wasn't moving). At that time I couldn't get much information ...
0
votes
1answer
3k views

Forward Windows system Event logs to a Linux Syslog Server with no agent

We have a SCOM 2012 server. We have SNARE agents for PCI compliance, but now we want to save money by gathering all events for all Windows servers using its native features. We also have a centralized ...
2
votes
1answer
2k views

How to identify drive device from log?

I have a messages about drive errors in log, like this: Bad Block On Device \Device\Harddisk0\DR0 I have 2 harrdrives in the system. How to know, which one causes these errors? I see nowhere the ...
1
vote
1answer
252 views

How to capture a windows pop-up box event in task manager or by other method?

The pop-up box event is a windows error notification with a 'OK' click box. I want to auto-click the 'OK' or suppress the appearance of the pop-up box. But how to capture this event? I can't see ...
4
votes
1answer
281 views

Are there events which show application launches and activity in Windows?

I would like to understand how my computer is being used. I could use something like ManicTime, but it seems like this information should also be in the event log somewhere. Is it? If not, is there ...
2
votes
1answer
5k views

What is SRUJet?

I see in Event log many error entries : svchost (1500) SRUJet: An attempt to open the file "C:\Windows\system32\SRU\SRUDB.dat" for read / write access failed with system error 5 (0x00000005):...
0
votes
1answer
413 views

How do I register an event log so that psloglist can access it?

This post is about the new sysmon tool from Sysinternals/Microsoft and the event log as relates to psloglist.exe, also from Sysinternals/Microsoft I'd like to query the sysmon windows event log: "...
0
votes
2answers
131 views

Event log Clear options in windows 2003

What are the different options to clear Event logs in windows 2003 other than opening event viewer and clearing logs one by one interactively? I don't consider powershell is an option as this also ...
0
votes
1answer
1k views

What's the equivalent of Wevtutil in XP or 2003?

I have a batch file for saving event logs to our shared drive. I want to do this for XP and Server 2003 without very much effort. What could I use since Wevtutil is only on Vista and up? rem Script ...
3
votes
0answers
61 views

How does Windows 7 determine that a system was not shut down correctly (Kernel-Power Event ID 41) [duplicate]

I have a strange situation that Windows 7 thinks it was not shut down correctly, and gives me a warning in the system event log like this: http://support.microsoft.com/kb/2028504/de What the KB-...
1
vote
0answers
245 views

XPath event filter working in Event Viewer but not in Task Scheduler

I'm trying to trigger a scheduled task with this XML: <QueryList> <Query Id="0" Path="Security"> <Select Path="Security"> *[EventData[Data[@Name='TargetInfo']='S']] </...
0
votes
0answers
99 views

Slow startup due to event log

My computer takes roughly 10-15 minutes to startup. I found that if I disable Windows Event Log in msconfig that startup is normal again. This is on windows 7. I am guessing that the event log is ...
0
votes
0answers
256 views

Sudden change of username & password prompt from UAC?

I just recently noticed that my username changed from "Dani" to "daniel" (It's a computer I recently got and haven't gotten around to changing its name.). The name of the PC is still the same "Dani-PC"...
0
votes
0answers
781 views

Get delete events with file name and user for particular folder

In my windows server 2012 i want to know which files is deleted from a folder by which network user. I want to track delete events only for particular folder. I have done it using group policy and ...
1
vote
0answers
577 views

How to detect if I/O errors are because of HDD fail or other Hardware/Software issues?

On my current system I had a 2TB HDD from Segate, after 2 years Windows started to restart on boot, so I formatted and installed ubuntu. All worked great but after a while I would get I/O errors, ...
0
votes
1answer
131 views

Is there any eventlog entry that shows the startup programs execution

I am running a selfprogrammed program on startup, or atleast, that is what I want to do. Execution doesn't seem to take place, even the built in logging to textfile does not happen. The program is ...
0
votes
1answer
1k views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
0
votes
1answer
2k views

Windows 7 Security Auditing being turned off - By what?

This has been driving me nuts. I've searched high and low for a solution but have found nothing. I did find this question which I thought held the solution through auditpol.exe. No dice. I can set my ...