The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

learn more… | top users | synonyms

16
votes
2answers
10k views

Are USB unplug events logged in Windows 7? (When was my mouse stolen?)

I know this sounds kind of ridiculous, but someone stole my mouse from my cubicle.. I came to work in the morning and was about to give my mouse a little shove to wake up the monitor, but it wasn't ...
8
votes
3answers
16k views

Where is the log file generated by a verbose start-up in OS X Lion?

After starting up my machine in verbose mode (cmd + v at start-up) I want to view the generated log messages, to debug an error I'm receiving (the error). The error is only displayed on the screen ...
7
votes
1answer
790 views

Did my computer unlock itself?

I woke up around noon to find my computer unlocked, despite having remembered locking it the previous night and not using it since. I checked the security log, and saw a "logon" event from 11:16 AM. ...
7
votes
2answers
40k views

How can I use Event Viewer to confirm login times filtered by User?

I'm required to log my start and finish times at work. Occasionally I forget to do this and had a bright idea that checking the Security events log would allow me to retrospectively ascertain my ...
6
votes
2answers
3k views

A better alternative to Windows XP Event Viewer?

Is there one available?
6
votes
3answers
8k views

Starting scheduled task by detecting connection of USB drive

I know it has been discussed before several times that it is not possible to start an application from an usb drive when connecting it due to limitations of autorun (or autoplay??) in Win 7. But it is ...
6
votes
2answers
174 views

How can I determine who is connected to event log remotely?

Is there a way to figure out which user and/or which computer is remotely accessing my computer's Windows event log files? These accesses are locking applications on the local computer and thereby ...
6
votes
3answers
43k views

Cause of "Session Circular Kernel Context Logger failed to start error in Event Log?

I'm running Windows 7 RTM 32-bit. I'm getting the following error in my event log every second or so: Session "Circular Kernel Context Logger" failed to start with the following error: ...
5
votes
4answers
42k views

Turning off windows event log?

The FAQ of GTA IV tells me to turn off Windows Event Log in msconfig. This will handle the game more efficiently. And it does! But turning off windows processes always worries me. So therefore: After ...
5
votes
1answer
2k views

Windows Security Log and Audit Failures

I was doing some routine maintenance on a Windows Server 2008 box that I manage. When looking at the Security Log in the Windows Event Log interface I see a burst of 50-200 failed logins that happen ...
5
votes
3answers
154 views

Blank screen in Windows 8.1

Recently I bought new computer (AMD FX-6300, 8GB RAM, SSD and GTX650 as graphic card). I installed Windows 8.1. At the beginning everything went well. But after one day I have two strange problems. ...
4
votes
4answers
2k views

Why does my PC reboot every 23 minutes?

Every 23 minutes in my system event log (Win 7) I see an error with event id 6008. It tells me "the previous system shutdown... was unexpected". When I work at the computer it doesn't happen so it ...
4
votes
1answer
179 views

Are there events which show application launches and activity in Windows?

I would like to understand how my computer is being used. I could use something like ManicTime, but it seems like this information should also be in the event log somewhere. Is it? If not, is there ...
4
votes
1answer
6k views

Run program when USB device is plugged in [duplicate]

I'm not talking about autorun (because I use Windows 7 and understand that this has been disabled now) but a task that I can create that will detect when a certain USB device has been plugged in. ...
4
votes
2answers
3k views

At what time did my Windows XP machine come out of hibernation?

I usually look at the event log to find out at what time I switched on my computer. I look for the entry saying "The Event Log service was started". I use this to record in-out times at office. These ...
4
votes
2answers
324 views

Equivalent of Event Log in Linux

Is there an equivalent to the Windows Event Log in Linux? When services crash or processes running in disconnected session explode, where's the problem logged to? More specifically, if a Java JVM app ...
3
votes
3answers
901 views

Is there a way to measure an employee's computer usage?

I have been asked to see if a user is being productive. Windows 7 doesnt log much in the way of computer usage, but I was thinking it would be possible to see how long the computer is in a locked ...
3
votes
3answers
2k views

slow startup of event viewer on windows 7 but fast on server 2008

Since switching to Windows 7 for my desktop I've started to get really p***ed off at the length of time it takes to start the event viewer to display the application event log (typically 20-30 secs or ...
3
votes
2answers
4k views

Windows 7 theme automatically switched from Aero to basic and back. Is there a log for what caused this?

This happened to me yesterday, and I just want to rule out that anything malicious was going on. I should probably also mention that it switched back to Aero after a minute or two. edit: I have ...
3
votes
1answer
3k views

Windows Event Log - Installs

Is there a way to find distinct program installs in the Windows Event log? I have tried looking for a specific ID to look for but cannot find one that references installs. If not, is there an easy way ...
3
votes
1answer
5k views

Is it possible to access the Windows event log if the system is unbootable?

If an installation of windows is unbootable, is it possible to access the event log from a Linux LiveCD?
3
votes
2answers
571 views

Windows 2008 security logs file name?

What's the Windows Server 2008 equivalent of the SecEvent.Evt file? So I can open the file itself on an external computer and see who logged in.
3
votes
2answers
2k views

How do I decode the “Faulting application start time” in a Windows event log entry?

An app I was running crashed and I wanted to know when it happened, so I opened up the Windows event viewer and looked for an entry. I found the entry, and then noticed one of the details of the ...
3
votes
2answers
286 views

When a hard drive powers off when it is inactive doe it cause a click on power up?

As the title suggests really. I've got a new laptop and every now and then it clicks quite loudly. I thought it might be the hard drive powering up after being idle but I am not sure. (It clicked ...
3
votes
1answer
10k views

How do I open the dhcp-client log on Windows 7?

Tried searching the web for answers but my google voodoo isn't strong enough.
3
votes
2answers
4k views

Access to Windows 7 log from a remote machine

I'm trying to access with EventViewer (from a Windows XP Prof) to a remote machine with Windows 7 (Seven). Before I started the Service "RemoteRegistry" I received an "Access Denied". After started ...
3
votes
0answers
58 views

How does Windows 7 determine that a system was not shut down correctly (Kernel-Power Event ID 41) [duplicate]

I have a strange situation that Windows 7 thinks it was not shut down correctly, and gives me a warning in the system event log like this: http://support.microsoft.com/kb/2028504/de What the ...
3
votes
2answers
913 views

Mozy fails along with this error

Any idea how to fix this? MozyHome backup is failing at the same time with a FilesystemError2. Windows 7 64-bit. Thanks! Log Name: Application Source: VSS Date: 12/18/2009 ...
2
votes
4answers
1k views

How to find out how often my Windows partition has been defragmented?

I know that Windows uses its defrag program to defragment my partition sometimes when my system goes to an idle state. Also, sometimes I used to execute defrag by myself in order to increase ...
2
votes
3answers
12k views

Windows 7: Crashing after update - How to check Event Logs?

My desktop appears to be blue screening and restarting after Win7 hard drive installation. How can I navigate to event viewer in Win 7 and see when was the last time it crashed unexpectedly?
2
votes
1answer
3k views

Is there a log file for RDP connections (with system-name)

Is there any possible way to know the system name of the system which has taken the system remotely? From the logs we are able to know the username (but these are generic login IDs) and the IP (but we ...
2
votes
1answer
625 views

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do ...
2
votes
1answer
2k views

Windows 7 Logon Failure Events Nonexistent?

I have a relatively new Windows 7 Professional 64-bit installation with all patches applied. I'm trying to test logon failure events to see what they look like and how they will look in our log ...
2
votes
1answer
10k views

Open / Read .evt Files From Another Computer

I'd like to open and read Windows Event Log files. The files will be copied from a non-functioning install of Windows XP SP3 and I'd like to read them from a totally different install of Windows XP ...
2
votes
1answer
33 views

Some sort of bootlog or system info log in Windows 7

I was wondering if there is some sort of "Bootlog" file or anything similar in which I can (at least) see when the computer was booted. So at what date and time that happened. So basically I need a ...
2
votes
4answers
3k views

Does Windows log programs that have been run/called?

In Windows, is there a log that records what programs were run/called? While browsing the internet, viewing a static page with no ads, mouse clicks, keypresses, or miscellaneous ...
2
votes
2answers
3k views

How to determine whether computer is on Domain from event logs?

I have spent a short period of time in an office recently, and I was able to dump the event logs on to a USB drive. There are only XP Pro machines in the office. Is it possible that there is a ...
2
votes
1answer
139 views

How to determine why Win7 machine is crashing?

When my Windows 7 machine crashes, I can't find any information in the event logs that can help me track down the problem. Is there a setting I can turn on to log more information so I can capture the ...
2
votes
1answer
738 views

Network connectivity logs on OSX

I'm trying to determine whether or not Macs store a log of network connectivity. Specifically, I'm trying to find out if one of my machines (Mac Tower, OSX 10.7.4, 2-2.26 GHz, 16 GB DDR3) lost ...
2
votes
4answers
278 views

How to see the login event programmatically?

I want to find programmatically from a log file that user logs in to a Debian machine. I also want to see who logs in and what ever is logged to the file on that time. How to accomplish that task on ...
2
votes
1answer
49 views

Is there a log I can see the first time I unlock my machine every day?

I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up? If I examine ...
2
votes
2answers
47 views

Figuring out which files where skipped during drag & drop

I just did a drag & drop on a windows system to move a large number of files. During this move there were a few errors involving corrupt files and other issues. Since I was doing this overnight I ...
2
votes
1answer
1k views

What is the trailing “\D” in Windows Event Log disk error details?

Sometimes in the Windows Event Log you may see an error or warning about disk problems regarding something like: \Device\Harddisk0\D. Presumably, the Harddisk0 refers to the first physical drive as ...
2
votes
0answers
489 views

Ubuntu 12.10 - Session.log filling hard drive

Here's a goofy problem. On my Ubuntu computer the session.log and session.log.old files have been continually filling up the hard drive. I've got a 80gb partition for the OS and these logs have ...
2
votes
0answers
293 views

Windows 7 Static IP Logs/History

Is there any way to pull up in the Event Log when a Static IP address was changed and if possible what changes were made? I've run into a problem where someone keeps changing their static IP address ...
2
votes
1answer
4k views

Sage 50 Accounts 2010 wont run on windows 7

I have sucessfuly installed Sage 50 Accounts 2010 onto my 32 bit Windows 7 machine, yet whenever i try to run it i encounter - Log Name: Application Source: Application Error ...
2
votes
0answers
851 views

Windows vista,MMC could not create the snap-in for event viewer

I have an issue where a windows vista computer isn't running certain applications (iTunes, Quickbooks, Word). Internet Explorer works fine. Seemingly every program that needs authentication to run is ...
1
vote
1answer
686 views

Why is event-log time different from taskbar time?

Today is the first time in several months that I've opened up Administrative tools to view the event log. Imagine my consternation when I saw events in the log with a time-stamp of 11/09/2012. The ...
1
vote
2answers
3k views

Windows Event Logs: Task Category

I have been scouring the internet for a formal definition of this piece of the Windows Event Logs. How is the category determined? Is there a set of standard values for this field? Can an application ...
1
vote
2answers
6k views

Very infrequent Excel crash

Have 1 user who keeps experiencing an Excel crash when sorting data. It is very infrequent and as of yet i've not done any serious troubleshooting, just an Office repair. Event log reports the ...