The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

0
votes
0answers
45 views

Windows 8.1 freezes due to video card and usually recovers

I have a couple of Radeon video cards (hd6450, hd6670) on win 8.1. Occasionally the screens will go blank and I get a message about recovering from a video card problem. Usually the recovery is ...
0
votes
0answers
33 views

EventLog Source “Connect”. No events in EventLog

I'm baffled by this, as I can find no documentation on wether or not "Connect" or "Connection" is some kind of registered keyword for EventLog Sources. I'm trying to create an EventLog Source called ...
0
votes
0answers
37 views

Microsoft-Windows-UAC-FileVirtualization error logged

I installed nxlog on my MS Windows 8.1 to remotely log the computer activity and discovered an error: Feb 08 17:31:28 samsung Microsoft-Windows-UAC-FileVirtualization: Accès refusé à la suppression ...
0
votes
0answers
50 views

How to find uninstalled software lists and logs in Windows?

I am using a Lenovo laptop with Windows 8.1. Yesterday I ran Lenovo Solution Center software. It gave me some details about the software which I have used in past and currently not installed in my ...
0
votes
0answers
278 views

How to find what is causing a Kernel EventTracing error in the Event Log?

I am troubleshooting a Kernel EventTracing "session failed to start with the following error: 0xc0000011" that pops up too many times in my event log. Every solutions I found in google were very ...
0
votes
1answer
65 views

View users login activity

Is there a way from the local event logs of a windows 7 computer to tell when the users logged into the cpu?- I see logon 4624 / logoff 4634 But those seem to be every 30min or so not tied to users ...
0
votes
1answer
53 views

Does Windows log when a user attempts to execute an application that is not on the whitelist?

I have searched Google with several search terms, attempting to discover if Windows logs when a user attempts to run an application that is not whitelisted, and if so, in what event log. Can anyone ...
0
votes
1answer
670 views

Recurring event in Event Log: “Windows Security Center Service could not stop Windows Defender”

I have recently set up a new development machine (Lenovo T440p laptop with Windows 8.1 Pro), and this event keeps getting logged to the Event Log (about once every 2.5 minutes): The Windows Security ...
1
vote
0answers
44 views

Analysis to extract task flows from UI event log

Given a table of UI events, how can I detect task flows, task loops, and behavioural patterns? I'm instrumenting my software to track what the user does. Controls clicked, keys pressed, and so on, ...
1
vote
1answer
327 views

Is there a trace of users killing a process on windows machine

We're debugging a situation in a retail location where the program does a bunch of logging but then everything just stops. it's pretty apparent that the comm to an external web service is taking some ...
1
vote
1answer
139 views

Accessing Server 2008 R2 manual shutdown notes and event logs

When I manually reboot a server I am required to specify a reason for the restart and given the opportunity to provide a comment. How do I review my past shutdown reasons and comments and what is the ...
0
votes
1answer
350 views

How to get the domain controller time sync event?

My computer is part of the domain. Say I manually adjust the clock to be off by 2min. Domain controller will sync this clock with its own at some point. Is it possible to track domain controller time ...
6
votes
3answers
622 views

Blank screen in Windows 8.1

Recently I bought new computer (AMD FX-6300, 8GB RAM, SSD and GTX650 as graphic card). I installed Windows 8.1. At the beginning everything went well. But after one day I have two strange problems. ...
1
vote
1answer
2k views

Why is the “Task category” drop down to filter a Windows event log disabled?

I've got a specific "Task category" of Windows log events I'd like to see on their own, but the option to filter by category in the "Filter Current Log" dialog is disabled/greyed out. How can I use ...
0
votes
1answer
44 views

how do I check, how many times printing command is run on my windows

I have to check for a specific time range, how many times the printing command is executed on my PC/Windows…. Is Operating system make any log of printing commands...? If yes How and where i found ...
1
vote
0answers
521 views

Windows 8 crashing unexpectedly

The computer I use at work sometimes crashes when I'm not near it. The first time it happened the OS crashed dead (even the mouse cursor wasn't moving). At that time I couldn't get much information ...
2
votes
1answer
1k views

How to identify drive device from log?

I have a messages about drive errors in log, like this: Bad Block On Device \Device\Harddisk0\DR0 I have 2 harrdrives in the system. How to know, which one causes these errors? I see nowhere the ...
1
vote
1answer
160 views

How to capture a windows pop-up box event in task manager or by other method?

The pop-up box event is a windows error notification with a 'OK' click box. I want to auto-click the 'OK' or suppress the appearance of the pop-up box. But how to capture this event? I can't see ...
4
votes
1answer
262 views

Are there events which show application launches and activity in Windows?

I would like to understand how my computer is being used. I could use something like ManicTime, but it seems like this information should also be in the event log somewhere. Is it? If not, is there ...
2
votes
1answer
3k views

What is SRUJet?

I see in Event log many error entries : svchost (1500) SRUJet: An attempt to open the file "C:\Windows\system32\SRU\SRUDB.dat" for read / write access failed with system error 5 ...
0
votes
1answer
332 views

How do I register an event log so that psloglist can access it?

This post is about the new sysmon tool from Sysinternals/Microsoft and the event log as relates to psloglist.exe, also from Sysinternals/Microsoft I'd like to query the sysmon windows event log: ...
0
votes
2answers
103 views

Event log Clear options in windows 2003

What are the different options to clear Event logs in windows 2003 other than opening event viewer and clearing logs one by one interactively? I don't consider powershell is an option as this also ...
0
votes
1answer
1k views

What's the equivalent of Wevtutil in XP or 2003?

I have a batch file for saving event logs to our shared drive. I want to do this for XP and Server 2003 without very much effort. What could I use since Wevtutil is only on Vista and up? rem Script ...
3
votes
0answers
60 views

How does Windows 7 determine that a system was not shut down correctly (Kernel-Power Event ID 41) [duplicate]

I have a strange situation that Windows 7 thinks it was not shut down correctly, and gives me a warning in the system event log like this: http://support.microsoft.com/kb/2028504/de What the ...
1
vote
0answers
210 views

XPath event filter working in Event Viewer but not in Task Scheduler

I'm trying to trigger a scheduled task with this XML: <QueryList> <Query Id="0" Path="Security"> <Select Path="Security"> *[EventData[Data[@Name='TargetInfo']='S']] ...
0
votes
0answers
96 views

Slow startup due to event log

My computer takes roughly 10-15 minutes to startup. I found that if I disable Windows Event Log in msconfig that startup is normal again. This is on windows 7. I am guessing that the event log is ...
0
votes
0answers
229 views

Sudden change of username & password prompt from UAC?

I just recently noticed that my username changed from "Dani" to "daniel" (It's a computer I recently got and haven't gotten around to changing its name.). The name of the PC is still the same ...
0
votes
0answers
460 views

Get delete events with file name and user for particular folder

In my windows server 2012 i want to know which files is deleted from a folder by which network user. I want to track delete events only for particular folder. I have done it using group policy and ...
1
vote
0answers
494 views

How to detect if I/O errors are because of HDD fail or other Hardware/Software issues?

On my current system I had a 2TB HDD from Segate, after 2 years Windows started to restart on boot, so I formatted and installed ubuntu. All worked great but after a while I would get I/O errors, ...
0
votes
1answer
113 views

Is there any eventlog entry that shows the startup programs execution

I am running a selfprogrammed program on startup, or atleast, that is what I want to do. Execution doesn't seem to take place, even the built in logging to textfile does not happen. The program is ...
0
votes
1answer
906 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
0
votes
1answer
29 views

Offline Windows Event ID Solution?

In my work i have many buildings with no internet , is there a program or an offline database for errors with event ID for Microsoft , so that will save my time for calling my assistants to search for ...
1
vote
1answer
828 views

Is there anyway to see when a Windows firewall rule was created/enabled using PowerShell v2 or CMD?

I have been poking around the interwebs but I cannot seem to find a definitive answer to this question. I am forced to work with PowerShell v2. I know that using the following command will give me a ...
1
vote
1answer
971 views

Where to check Windows service startup history

I suspect one of important services did not start properly on last Windows 7 restart. I have searched eventlogs but there is so many places to search. Is there some place in eventlogs where at least ...
6
votes
2answers
720 views

How can I determine who is connected to event log remotely?

Is there a way to figure out which user and/or which computer is remotely accessing my computer's Windows event log files? These accesses are locking applications on the local computer and thereby ...
0
votes
0answers
2k views

Windows 8 very slow boot time and warning with event ID 153

I have an Acer aspire 6920g notebook. I use this old laptop just for some basic tasks and testing. Currently it is dual boot Windows 8 and Ubuntu. When I turn it on the first time I log into Windows I ...
2
votes
1answer
83 views

Is there a log I can see the first time I unlock my machine every day?

I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up? If I examine ...
4
votes
2answers
2k views

Equivalent of Event Log in Linux

Is there an equivalent to the Windows Event Log in Linux? When services crash or processes running in disconnected session explode, where's the problem logged to? More specifically, if a Java JVM app ...
7
votes
1answer
2k views

Did my computer unlock itself?

I woke up around noon to find my computer unlocked, despite having remembered locking it the previous night and not using it since. I checked the security log, and saw a "logon" event from 11:16 AM. ...
1
vote
1answer
553 views

Getting Microsoft Security Essentials to alert me when a threat has been found

Is there a way of getting Microsoft Security Essentials to alert me when a threat has been found? I recently went through the log tab of Windows Defender and found a number of threats in the ...
0
votes
1answer
531 views

Surface Pro (W8.1) shut down after WindowsUpdateClient events

My Surface Pro 2 running Windows 8.1 shut down last night for no apparent reason. Between 9:32 PM and 9:36 PM the eventlog logged this (red) error: The machine-default permission settings do not ...
0
votes
1answer
257 views

Route Events Recorded in System Event Log to Custom Event Log

I have an instance of Windows Server 2008 running some specific services that support my application. There are events within the Windows Events System Log generated for my services but by other ...
2
votes
1answer
42 views

Some sort of bootlog or system info log in Windows 7

I was wondering if there is some sort of "Bootlog" file or anything similar in which I can (at least) see when the computer was booted. So at what date and time that happened. So basically I need a ...
2
votes
1answer
12k views

Is there a log file for RDP connections (with system-name)

Is there any possible way to know the system name of the system which has taken the system remotely? From the logs we are able to know the username (but these are generic login IDs) and the IP (but we ...
2
votes
1answer
826 views

Process Monitor capture filter (or scripting)

As you know, Microsoft distributes the Russinovich extremely powerful process monitor. It captures a lot of system events and has a filter to show only some of them. I want to record a rare fault at ...
0
votes
0answers
156 views

Windows Login Failure

I'm getting an error in the Event Viewer, which is also generating a lot of Logon Failure messages on our syslog server. Pretty much stuck on how to resolve. EventID: 536 Logon Type: 3 Reason: The ...
1
vote
1answer
238 views

Windows 7 OK button on Copy To dialog doesn't copy profile

So I am attempting to copy a User Profile to the default profile. I am using WinSpy++ to enable the disabled "Copy To" button - this process works on a stock laptop I have here. However, this does ...
2
votes
1answer
1k views

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do ...
1
vote
0answers
62 views

How to check history of a particular software start and close event on windows7

I have used event viewer to check system log in but how to check if I want to see if someone opened visual studio on system? I think its info should be in event viewer but I am not sure. I have ...
2
votes
1answer
13k views

Retrieving last Login and Logout time in windows

How do I get the last login and logout time of a Windows user using a VB script or command? Tried using C:\> net user username | findstr /B /C:"Last logon" but it says username could not be found. ...