Questions tagged [event-log]

The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Windows 10 Event ID(s) to detect and uniquely identify Android mobile phone disconnection from desktop computer

Overview I want to be able to uniquely identify when a particular Android device connects and/or disconnects from my Windows 10 PC. I run different scripts based on the particular device and whether ...
0
votes
1answer
42 views

Properties in windows event ID 41

I want to understand the significance of the values for each property in Windows event Log ID 41. Windows System event ID 41 from source Kernel-Power has the following properties - EventData ...
0
votes
0answers
5 views

How to use Get-EventLog, Convert-ToHTML and add a javascript search box to filter entries? [migrated]

To describe what I am trying to do. Note: in the meantime, I use ctrl f which is still way quicker than the Windows event viewer on a slow server. I want to use PowerShell's Get-EventLog (done) ...
0
votes
0answers
11 views

How to run/kill/etc process when laptop on battery? [duplicate]

I need to run a script when my laptop starts working on battery. Is there a log event or something like this?
0
votes
1answer
49 views

Weird file on my flash drive?

I was using a FAT32 formatted flashdrive on Ubuntu earlier, and when I booted into Windows 10 (cuz yes, I have a dual-boot setup), there was an extra file on the drive. Here's what it said: Filename: ...
1
vote
1answer
11 views

'Device Connected' sound plays on Windows 10 over and over

I keep getting the 'Device Connected' Sound on my Windows 10 PC. It plays repeatedly, anywhere from about a minute between each one to playing several in quick succession. I've installed USBLogView ...
0
votes
0answers
46 views

Something cause BSOD. A device attached to the system is not functioning

For some time now I started getting BSOD screens. Just now after the one IRQL NOT LESS OR EQUAL, right after system rebooting I opened Event Viewer and the last one error message was: The Network ...
0
votes
0answers
47 views

ErrorCode 87 in Event Viewer

On my Windows 10 sometimes I hear sound indicating that a device that was connected either via USB or Bluetooth was removed but I don't know which device was it and notifications pane doesn't have ...
0
votes
1answer
31 views

Is there a way to filter Windows Event Logs by user?

I have my kid using my computer with a separate account and I would like to see all the events triggered by his user account. Is there a way to do this either with the Event Viewer or Powershell?
-3
votes
2answers
120 views

Have I been hacked?

I recently received my laptop from repair and I just had a hunch that something fishy might have happened so I checked the log files on Windows Event Viewer and it turns out that my laptop has been ...
0
votes
0answers
20 views

How can I know when I logged in to my computer? (After a lock or at startup) [duplicate]

I'm working on a Windows-10 machine, Home edition. I would like to know when I logged on to my computer, mostly after a lock. In order to do this, I'm looking at the event log (security auditing), ...
0
votes
0answers
10 views

Can I query AD event logs to see what group membership permitted a logon attempt to succeed?

I'm currently looking at some legacy Active Directory security groups and before deleting them, I'd like to do some due diligence to see if they're still actively used. Obviously there is some ...
1
vote
0answers
38 views

Scheduling an event based on USB device connect/disconnect in Windows 10

I have two PCs and a single set of peripherals between them. Whenever I want to switch PCs, I have to swap the monitor input, change audio source and switch over my peripherals by pressing a button on ...
0
votes
0answers
34 views

Input Queue Tracing with ETW Microsoft-Windows-Win32k

I have UI lags when the machine is busy. When I click on different windows on my UI the selection is not changing which indicates a blocked message queue. After some time 20s or longer the click ...
0
votes
0answers
12 views

Tools softwares to capture sort filter windows event logs and windows error logs?

As in my office there are 60 desktop pc of amd Ryzen 7 2700x 3700x 3800x with b450 x470 x570 b550 asus gigabyte MSI motherboards all have UEFI BIOS and RTX 3070 RTX 3090 RTX 2080ti graphic cards with ...
0
votes
0answers
67 views

How to retrieve BIOS errors from BIOS events logs?

As in my office there are 60 desktop pc of amd Ryzen 7 2700x 3700x 3800x with b450 x470 x570 b550 asus gigabyte MSI motherboards all have UEFI BIOS and RTX 3070 RTX 3090 RTX 2080ti graphic cards used ...
0
votes
0answers
109 views

Error “DCOM was unable to communicate with the computer using any of the configured protocols” is generated for every 5 mins for a nonexistent server

In our server event log, for every 5 mins the below error will appear. DCOM was unable to communicate with the computer RemovedServerName using any of the configured protocols. How to identify which ...
0
votes
0answers
27 views

How can document bad internet performance frequency over certain time period?

Recently, due to bad quality of internet in my new flat, I tried to figure out to document internet-drops logs over a certain period of time (not asking about when a connection is made or lost, but ...
0
votes
2answers
61 views

Determine what changed my desktop wallpaper

How do I determine what caused the change of my background wallpaper? Identify the programm/process if that was a malware, get event information, anything? Somehow find out why that happened. My ...
0
votes
0answers
67 views

Do not log event id 4688 – A new process has been created

Using Group Policy Editor (gpedit.msc) or Local Security Policy (secpol.msc) Security Settings -> Audit Policy -> Audit Process Tracking or Advanced Audit Policy Configuration -> System Audit ...
0
votes
0answers
41 views

Windows Event Log: always using CPU

I've noticed that in Process Explorer, the Windows Event Log service is constantly using up to 2% of my CPU although it does fluctuate. Is there any straightforward way to see what is causing this ...
0
votes
0answers
2k views

What is the cause of this windows Event Error: CbsPackageServicingFailure2

I'm having an issue figuring out what the cause of the error below is. This error is appearing in the windows logs every ten seconds. I'm worried about what could happen to the system with this error ...
0
votes
1answer
120 views

How can I repair “Failed to start service WMS”

I'm receiving constantly this error on windows event viewer Failed to start service WMS. Program C:\Windows\wmu2\wininit.exe couldn't be launched. CreateProcess() failed: The system cannot find the ...
0
votes
0answers
15 views

Power Events: “state: active” is not logged

powercfg /sleepstudy Generates only logs for when computer goes into "state: standby" But when i wake the computer after it goes into "state: standby" i would expect a "state:...
0
votes
1answer
13 views

Find out what uninstalled my application

I have an application, soundswitch, which I use on a daily basis (using keyboard shortcuts it switches sound device). Yesterday my keyboard shortcuts did not work, but I just thought something ...
0
votes
1answer
61 views

How to check wifi connection duration in windows 10

I am using windows 10 on my computer system and I would like to know when did I connect and disconnect my WIFI connection. Is it possible to obtain that record in Events log? If not where can I find ...
0
votes
0answers
15 views

Chrome: is there a log on adding/removing extensions?

Using (latest) Chrome on Linux (Ubuntu). I had this extension to remove elements on a page ( including within frames ) that was working very well. The other day I cleaned the extensions using the ...
0
votes
1answer
16 views

Windows 10 keeps suspending whenever i use keyboard

Whenever I'm working on word of at any other place requiring keyboard usage, my windows randomly goes on suspended mode. I checked the event viewer and it turned out there was some restarting ...
0
votes
1answer
209 views

How to find WiFi related events\logs in win10

Is anyway to find WiFi related events\logs in win10? My computer is connected to a specific WiFi and i want to know on what date this WiFi is defined in my windows.
0
votes
0answers
21 views

Description of event log Event Data for Disk Event ID 7 (The device, %s, has a bad block.)?

Is there any documentation that describes the Event Data associated with a Disk Event ID 7? The device, %s, has a bad block. Some examples of the associated Event Data is: 0000: 00800003 00000001 ...
1
vote
1answer
58 views

WinEventLog for monitoring BitLocker

I am a Newbie to Splunk and working on monitoring the BitLocker process. I was wondering if any Windows Security log that I can leverage to check whether the BitLocker was launched by someone to ...
1
vote
1answer
49 views

Continuously “Response: Not available” Windows 10 event logs

I continuously gets the following event log in Windows 10 ver. 1809 LTSC: Fault bucket , type 0 Event Name: CbsPackageServicingFailure2 Response: Not available Cab Id: 0 Problem signature: P1: 10.0....
0
votes
0answers
132 views

Analyzing windows event logs on another windows system with less event publishers

When analyzing saved event logs from another PC, one may see the following instead of an event description: "The description for Event ID [] from source [] cannot be found. Either the component ...
1
vote
1answer
265 views

How do I determine which Windows services were recently disabled?

Does Windows 10 keep a log of when/which services were enabled/disabled? How would a person locate this information? Thanks!
1
vote
0answers
2k views

How to fix CPU problems in Windows EventLog service?

The EventLog service in my machine (running under svchost.exe) is using a lot of CPU. I assume it's because some application, driver or component is generating too many logs. How can I spot this ...
1
vote
0answers
86 views

How to trigger an event when an ISO is mounted on windows? [closed]

I need to run a windows service when a particular ISO is mounted. I know that an Event Trigger can be defined to do something like this but I couldn't find an event to subscribe to. How can I detect ...
0
votes
2answers
79 views

How do you capture programs/scripts that run and quickly disappear in Windows 10?

I have noticed that a CMD script seems to randomly run while doing things but cannot seem to capture what or where it's coming from. Is there a way to use some sort of logging app to see what comes ...
1
vote
1answer
176 views

How can clear Microsoft-Windows-Diagnosis-DPS/Operational event log with powershell command?

I wanna clear Operational type logs in the following path in Event Viewer : Applications and Services Logs / Microsoft / Windows / DriverFrameworks-UserMode I tried with this command in power-shell ...
2
votes
1answer
450 views

Where to get schemas for log events for windows 10?

For example, "Microsoft-Windows-Kernel-Power" source contains bunch of power related data, for example, event with id 507 looks like this: <Event xmlns="http://schemas.microsoft....
0
votes
0answers
393 views

Event Logs: DockerService and VC Helper - PowerEvent handled successfully by the service

OS: Windows 10.0.18362 Pro I had a BSOD event a bit ago, and I went to dig in some event logs and I stumbled upon something interesting. I noticed repeated application event log entries every few ...
1
vote
0answers
772 views

Bluetooth connection log

Is there a way to obtain the Bluetooth connection history from windows 10? I want to find out how long a device remained connected? I checked the details tab under device manager. But it only shows ...
3
votes
1answer
2k views

Intel Wireless card wakes up laptop every 15-45 minutes during sleep, logs telemetry, and goes back to sleep DESPITE being expressly told NOT to do so

I have a Razer Blade 15 (2019), with Intel i7-9750H and NVIDIA 2060. The wireless adapter is an Intel Wireless-AC 9560 at 160MHz. The laptop also has a Realtek PCE GbE Ethernet controller Throughout ...
1
vote
1answer
46 views

Windows Event ID Limitation

We have a software that registers a specific ID as an Event ID and is added to the Windows event log. Here, the Event ID is incremented rather than using a specific Event ID and adding a body. This is ...
0
votes
2answers
534 views

How can I find out what time the user went inactive on console in Windows 10?

I want to determine the moment when the user (me) went inactive -- "active" is defined as pressing a key or moving the mouse -- on a Windows 10 console. The easiest way it seems to me is to determine ...
0
votes
0answers
1k views

Alert “ Possible detection of CVE”

From Windows event log, did the exploit was blocked? Can I get what CVE number from event log so I can know the specific KB number? 39536 Apr 13 08:31 Information Microsoft-Windows-Kernel-General 1 ...
1
vote
1answer
22 views

After Ubuntu hangs requiring a reboot how to identify the culprit process?

After having let a new ubuntu 19.0.4 installed machine alone for maybe an hour I found that a direct session from attached keyboard/screen was unresponsive with the screen blank. In addition it ...
1
vote
0answers
24 views

Is there a way to look at windows logs and uninstall previously installed software?

I installed a software with a custom installer, so it didn't log it in the application tab. The software installed third-party software which I am trying to remove. However, I don't know what other ...
0
votes
1answer
31 views

Linux trigger on a command

I would like to listening on a command. So my idea is that either systerm or human call a command log it somewhere with the given parameters. Can i solve it somehow?
1
vote
2answers
2k views

What time zone does windows event logs show

I have a doubt on the time zone shown in the windows event logs. I had read that if I export the windows event logs from another machine and open it in my machine which has a different time zone, the ...
2
votes
1answer
208 views

How to view hardware monitor events in Windows 10?

I am wondering if there is a log somewhere in windows to tell me when my monitor turns on and off. Occasionally it turns off for a few seconds and then back on, and as the reasons could be plenty, I ...

1
2 3 4 5
7