Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [event-log]

The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

0
votes
1answer
111 views

Establishing a real time event trace consumer in Windows 10

I am trying to use software like "Message Analyzer" and "TraceView" to receive event from "Microsoft-Windows-Security-Auditing" or "Microsoft-Windows-Eventlog" Providers, but I had no luck with ...
0
votes
1answer
24 views

How to filter out user keyboard only login times from the 4624 Event Log data?

I am trying to filter out from the Security Event Log, those logs which correspond to the user (me) logging in by typing out password on the keyboard. I would like it to detect unlocking the screen as ...
1
vote
0answers
14 views

Windows 7 doesn't generate wake event in system log [duplicate]

I set up a scheduled task to run with this event as a trigger: Log: System Source:Power-Troubleshooter Event ID: 1 But I don't see any event in the system log. The only event which time is nearest ...
0
votes
0answers
54 views

Get history of IP configuration changes

I have monitored some problems with the IP configuration during job execution. It looks like the DNS server name and the domain suffix is changed sometimes. I would like to find corresponding events ...
1
vote
1answer
21 views

Monitor file association change?

On Windows, I want to check to see when a file association was changed, and who or what triggered this change. For example: If I change the .PDF file association from Microsoft Edge to Adobe Reader, ...
1
vote
2answers
445 views

How to show event logs containing specific text from powershell

I'm trying to quickly show all events from the last ~day in window's event log which contain a certain string in power shell. I've found powershell commands for listing events, but I basically want ...
0
votes
1answer
38 views

How are system events connected to the System Reserved Partition recorded so that failures get logged?

I've been reading up on the System Reserved Partition and understand that it holds all the boot required items for a Windows PC to start. I am trying to understand how its interaction with the main OS ...
0
votes
0answers
70 views

Memory exhaustion with apparently no process exhausting it

I am suffering memory exhaustions on a Windows 10 computer nearly every three days, with no pattern to reproduce (sometimes after PC is powered on for days, sometimes just after power on, sometimes ...
1
vote
2answers
265 views

Event Viewer filter by source disabled

I've tried looking around other posts here as well as Microsoft community pages but to no luck. In my environment (Windows 10), the filtering by source is Event Viewer is blank, and I cannot open ...
0
votes
0answers
141 views

How do I keep track of unauthorised login/file operation events in a Synology NAS?

So as the title states, I am wondering if there is an option to keep track of unauthorised events, such as: failed authentication due to invalid credentials (e.g. AFP, NFS, etc.) failed file ...
1
vote
1answer
103 views

How to read the latest Chkdsk event viewer log in PowerShell (on Windows 10)?

As I find it rather cumbersome to run Event Viewer and filter out the latest Chkdsk log, may I poke a question: How to read the latest Chkdsk event viewer log in PowerShell (on Windows 10)? My ...
0
votes
1answer
125 views

Windows: What are the security implication of adding Network Service account to “Event Log Readers” group?

I want to read security audit logs from a network service. By default, Network Service does not have permission to read but it can if the account is added to "Event Log Readers". One of the examples ...
-1
votes
3answers
160 views

How to get software version before update (Windows)

I'm troubleshooting my Dino-Lenovo running Windows to play BluRay disks with VLC. After updating VLC, I get more errors with the update. I would like to downgrade to the previously installed version. ...
1
vote
1answer
302 views

windows task scheduler event on external ip change

UPDATE 2 : i came up with this script : @echo off nslookup myip.opendns.com resolver1.opendns.com | Find "Address:" | Find /V "208.67.222.222" >IP_1.txt nslookup myip.opendns.com resolver1....
0
votes
0answers
23 views

About WS- Discovery port

By inspecting Sysmon event report Is it normal to see open connections to Web Services Dynamic Discovery (WS- Discovery) port by applications as Regedit, cmd.exe, iexplore, tasklist and many others. ...
1
vote
1answer
41 views

Custom filter for all event logs that apply for new logs as well

I know you can create default filters for your local event logs. When I support customers I often receive an .evt file that I have to look through. I begin every search by going to filter, scrolling ...
0
votes
0answers
124 views

NXLog file Truncates

I am using NXLog to auto restart process and for email alerts. I also tried to use $Message = substr($raw_event, 0, 1000); But its still giving me the same problem. Due to this error, the S3 sink logs ...
0
votes
0answers
15 views

Windows Event Viewer - Custom View - First unlock event for every day

the below XPath filter for the Security Windows Event Log provides a filtered event log list for all Windows Unlock Events (replace myDomainName and myUserName to your own). I would like to extend it ...
0
votes
0answers
797 views

Interactive Services Detection service terminated with the following error: Incorrect function

I found this entry in my system event log. Can anyone shed some light on this one for me? Thanks for your time. Log Name: System Source: Service Control Manager Date: 3/8/2018 9:...
1
vote
1answer
2k views

Event ID 7036 not showing in Windows Event Log on Win10

After a service is stopped in Windows Server 2016 in the System Windows Event Log appears an event ID 7036 with a message like The (ServiceName) service entered the (StatusName) state. But in ...
0
votes
1answer
33 views

How to tell when I logged in?

I want to find out when I logged into my machine on a given day. In the Event Viewer, Windows Logs, Application, I see entries like: Level Date and Time Source Event Id Task ...
0
votes
0answers
25 views

Does OS X keep logs of internet traffic, specifically form submissions?

I'm trying to help a family friend prove to their daughters school that she submitted homework on a learning management system that one of her professors uses. The company is claiming they can't look ...
0
votes
0answers
30 views

Building SGL messages with 3ware 9650SE-12ML on windows 7

My 3ware 9650SE-12ML configuration is like this. p00~p11 : 11 HUS726040ALA610 HDDs for Raid 5 p12 : One HUS726040ALA610 for spare OS : Windows 7 32bit On the Windows 7 event viewer, I found these ...
0
votes
0answers
29 views

Lost ability to uninstall programs on Win7

A failed update of OOo resulted in warnings of Internal errors 2503 and 2502 that prevented the repair or uninstallation of both the update and previous version. From the cmd window, chkdsk c:\ ...
1
vote
1answer
122 views

win7: chkdisk log truncated — where is the rest?

i had chkdisk run before windows starts. Looking into the event log i only see part of the log that chkdisk produced: ... c0 04 f0 79 53 12 80 fa c0 04 f0 79 53 12 80 fa ...yS......yS... The multi-...
1
vote
0answers
176 views

Measure EPS (Events per Seconds)

I want to measure the EPS metric, or the number of processed events per seconds in my device. I read that the most accurate measurement of EPS is to use a simple syslog server, such as Kiwi Syslog ...
0
votes
1answer
489 views

System boot time for Windows

I am working on a system diagnostic application and I'm looking for some information on Windows boot up time in different situations. Is there any way I can find the following information on ...
0
votes
1answer
131 views

can't move event logs

My goal is to move the Windows Log files to a different drive. There are some posts which describe how to do this, like this one . I used a script which to set the log location to an alternative ...
0
votes
1answer
1k views

how to prevent automatic log off in windows 7

I have a remote machine that runs on Windows 7, it gets logoff by closing all running application and the gets logged in again automatically. It happens every day but not on specific time and without ...
0
votes
0answers
357 views

How can I find what is preventing a Windows computer from shutting down remotely?

We have Windows Server 2008 Service Pack 2 machines that we reboot from a Linux server using net rpc shutdown -f -r -I {ip_address} -U user%password. Usually this works fine. However, sometimes the ...
0
votes
0answers
385 views

Win7 application hang (event ID 1002) - definition of “Termination Time”

One of my C# apps reportedly hung up. In the application event log I can see it is logged under event ID 1002 with below details. My question is about the statement "Termination Time". What is its ...
0
votes
2answers
278 views

Can we sort Windows EventLog with millisecond accuracy?

When more than one Windows Event Log is created within the same second, the sort/display order can be different than the order in which they were written. The index seems to be the reverse order in ...
0
votes
2answers
269 views

Windows 10 Sound Level Change suddenly

I asking maybe the same question as many, but the solution I have found that was working for them don't work for me... It's been a long time problem that I wasn't bothering much but it became more and ...
0
votes
0answers
31 views

Can I know which computer accessed/modified certain files stored on Server?

In our computer lab in my school, all our individual computers are connected to a main server dedicated to be used for our lab. We mostly store our files on the server, so that in case we cannot use ...
0
votes
2answers
1k views

Display all power related events (turn-on/-off/sleep/hibernate/…)?

Imagine your computer is doing strange things regarding turning on, off, sleeping, hibernating, restart, being on in the morning when you set it to sleep in the evening before and similar things. I ...
0
votes
0answers
43 views

Remote Desktop Service disabled but event log entries are being generated

The service Remote Desktop Services, and all other Remote Desktop XXX services, are disabled in my list of services. However, every time I start the computer, the following event is generated (usually ...
2
votes
1answer
631 views

How can I remove a Windows event log?

During some tests of a C# program that writes into the Event logs I accidentally created an event source "mysb" inside a event log named "mysb" instead of the "Application" event log. Now I want to ...
2
votes
0answers
103 views

How can we detect if a windows service is deleted,is there an event log id for it?

Someone deleted a windows service, how can we detect it? Is there an event id related this action?
0
votes
0answers
2k views

The description for Event ID 263 from source Win32k cannot be found

I'm facing below error frequently on my Windows 10 operating system computer. I tried with many troubleshooting steps like: "CHKDSK, SFC Check, DSM online, Windows update " but could not figure it out....
0
votes
0answers
24 views

How to tell which program just excecuted a task or process? (Don't know if PhraseExpress or Word made the change.)

How do I figure out which program, application, add-on, or anything else just made a change in my computer? I tried to be a considerate person and look up for answers in similar questions first. It ...
7
votes
1answer
1k views

Detect user login in Windows Domain Controller

I'm trying to detect a user login event in Windows DC (Win Server 2012), but i'm having the following issues: The event 4624 is not really certain because it might be automatically generated. For ...
1
vote
3answers
3k views

Start and shutdown log Windows 10

I would like to check when my PC started, I read about event log id 6006 and 6005 to check the log service start up and shutdown event... but this method doesn't work. The last eventlog service ...
0
votes
1answer
93 views

add event log id description on windows server

How do I add a description for Event IDs on my Windows Server? I see this in the event log: The description for Event ID 7533 from source XXX cannot be found. Either the component that raises this ...
-3
votes
1answer
55 views

What event logs exist in Windows and what is their purpose? [closed]

I only know one event log named "Other". I want to know the name of all event logs, which exist in Windows. Additionally I want to know what purpose these event logs (including "Other") have. I am ...
1
vote
1answer
618 views

Tracking removal of client certificates

I connect to some remote web services that require a client certificate for authentication. Using certain tools (eg. SOAPUI), I can specify the certificate directly, but when doing quick requests to ...
0
votes
2answers
249 views

Check the URL visited by other software [closed]

In web browsers, I can check the URL I've visited through history page. What if I want to check the URL visited by specific software in my Windows 10 computer? For example I opened a software or ...
2
votes
2answers
2k views

Windows Task Scheduler not running task on event

I'm trying to run a task when I get a network connection and am following these steps. I created a test.bat that does some stuff script that and set the task scheduler trigger for it to Log: ...
0
votes
0answers
246 views

Missing event logs due to System Time Change

On 8th April 8:30 PM my PC (Sony VAIO Laptop, Windows 10, 64x) faced some problem and it turned itself off. The screen suddenly just hung and within few seconds it turned off (without proper shutdown ...
0
votes
1answer
136 views

Write Windows shutdown time to logfile

I try to automatically log the startup and shutdown times of my Windows Client (Windows 7 and newer) to a log file for later analysis. Therefore I created a task in Task Scheduler which executes the ...
3
votes
0answers
2k views

WMI-Activity Event ID5858, ResultCode = 0x80041032 & DCOM Event 10010 timeout errors

I've been trying to eliminate two types of errors for about a month now. First are WMI Event 5858 result code: 0x80041032 and the Second are DCOM Event 10010 server timeout errors. Read 100s of ...