Questions tagged [event-log]

The Event Log is a set of logs in a Windows system that are used by default by the Windows system, system component and many applications to record events.

Filter by
Sorted by
Tagged with
1
vote
1answer
18 views

Windows Event ID Limitation

We have a software that registers a specific ID as an Event ID and is added to the Windows event log. Here, the Event ID is incremented rather than using a specific Event ID and adding a body. This is ...
0
votes
0answers
17 views

How to have Memory Diagnostic Tool not turn off the computer when it's done?

I ran the Memory Diagnostic tool 3 times in Windows 19 and it turns off the computer when it's done. I couldn't find the results in the event log. I found out that it can't write to the event log if ...
0
votes
2answers
88 views

How can I find out what time the user went inactive on console in Windows 10?

I want to determine the moment when the user (me) went inactive -- "active" is defined as pressing a key or moving the mouse -- on a Windows 10 console. The easiest way it seems to me is to determine ...
0
votes
0answers
77 views

Alert “ Possible detection of CVE”

From Windows event log, did the exploit was blocked? Can I get what CVE number from event log so I can know the specific KB number? 39536 Apr 13 08:31 Information Microsoft-Windows-Kernel-General 1 ...
1
vote
1answer
21 views

After Ubuntu hangs requiring a reboot how to identify the culprit process?

After having let a new ubuntu 19.0.4 installed machine alone for maybe an hour I found that a direct session from attached keyboard/screen was unresponsive with the screen blank. In addition it ...
0
votes
0answers
13 views

Windows 10 removable storage mount event

I'm attempting to perform an automatic directory synchronization between a PC folder and a Nook eBook reader when the reader is connected via USB cable (sideloading). I am using Microsoft SyncToy. The ...
1
vote
0answers
20 views

Is there a way to look at windows logs and uninstall previously installed software?

I installed a software with a custom installer, so it didn't log it in the application tab. The software installed third-party software which I am trying to remove. However, I don't know what other ...
0
votes
1answer
26 views

Linux trigger on a command

I would like to listening on a command. So my idea is that either systerm or human call a command log it somewhere with the given parameters. Can i solve it somehow?
0
votes
1answer
167 views

What time zone does windows event logs show

I have a doubt on the time zone shown in the windows event logs. I had read that if I export the windows event logs from another machine and open it in my machine which has a different time zone, the ...
2
votes
1answer
28 views

How to view hardware monitor events in Windows 10?

I am wondering if there is a log somewhere in windows to tell me when my monitor turns on and off. Occasionally it turns off for a few seconds and then back on, and as the reasons could be plenty, I ...
0
votes
1answer
72 views

Windows 10 logs event id 98 volume recovery every second “No action required”

An example: Logboeknaam: System Bron: Microsoft-Windows-Ntfs Datum: 20-02-08 20:30:56 Gebeurtenis-id:98 Taakcategorie: Geen Niveau: Informatie Beschrijving: Volume ...
24
votes
1answer
5k views

How to disable Windows 10 system log

In Windows 10 Resource Monitor I found that the system process is constantly writing C:\ProgramData\Microsoft\Windows\wfp\wfpdiag.etl at like 30-100KB/s. This equals 1TB write/year which is not ...
0
votes
0answers
68 views

Event Viewer Errors: Address <IP> being plumbed for adapter <number> already exists

I'm seeing these errors repeating ~every 5 minutes in my Administrative Events: Address 192.168.0.195 being plumbed for adapter 18 already exists and An error has occurred in initializing the ...
0
votes
0answers
69 views

How to determine the process that created a specific task in Windows’s Task Scheduler

I want to be able to determine what process (PID, process name/path) created a task in Task Scheduler. Currently, I am aware of two relevant Windows events: Microsoft-Windows-Security-Auditing Event ...
1
vote
0answers
164 views

Random RDP Disconnects

Since my last windows update (Feature update 1909 - not sure if the update is related to the issue), I'm having issues with my rdp session being interrupted several times a day. The computer I'm ...
1
vote
0answers
40 views

Windows Events: Limit on number of enabled logs

I'm trying to collect events from multiple files (channels), including debug, analytic, diagnostics and tracing logs. When I've run a number of wevtutil sl ... /enabled:true, I get message: ...
1
vote
1answer
150 views

How to find cause of 'Unexpected' Windows restarts

For roughly the last 3 months, nearly every night my Windows 10 64-bit Enterprise (1803) work computer is restarting. It is a 1 year old Dell Laptop, plugged into a 1 year old UPS. It works through ...
1
vote
0answers
148 views

Windows tracerpt generates invalid event schema

I'm using the Windows Performance Recorder from the Windows Performance Toolkit to record event trace logs. Event trace logs are not self-describing, and rely on "providers" registered with Windows ...
0
votes
0answers
35 views

Looking for taskhostw.exe log

I have a couple of Win10 PCs with some kind of antivirus software installed on them, and recently (following antivirus logs) process taskhostw.exe started to act suspiciously, trying to make strange ...
1
vote
0answers
10 views

How to check for screen activation in system logs

I have a Debian 10 (Buster) installed, and I was wondering how to check in the system logs when the screen was activated. The way I configured the OS is that I have turned off in the power manager ...
0
votes
0answers
32 views

C++ application crashes

I have C++ application running on Windows 7 machine. It has .net 4.8 version, recently updates windows such as Security Update for Microsoft Windows (KB4512486),Security Update for Microsoft Windows (...
1
vote
0answers
44 views

Syslog-ng log rotation

i have a problem with syslog-ng rotate system. I need that my file rotation is schedule one time a day, example : -rw-r----- 1 root adm 37K Oct 16 192.168.40.240.log -rw-r----- 1 root adm 83K Oct ...
0
votes
0answers
30 views

Extracting logs for Process Mining in SAP ECC 6

We are trying to export internal processes data from SAP for a report with the Process Observer in order to apply process mining to them. We implemented note 1832016 and checked the update note ...
0
votes
0answers
209 views

Windows Security Event Log - Periodic 4672 events with Account Name: SYSTEM

I'm seeing periodic 4672 events (Special Logon) in my Windows Home 10 workstation. What triggered my interest is that the events triggered by Security ID / Account name "SYSTEM", is that they occur ...
0
votes
0answers
128 views

Finding USB Event Logs for Windows 7

I am trying to find the Windows Event code for when a USB is inserted into a Windows 7 machine. From the Event code, I would like to identify when a user writes, copies, modifies and deletes a file to/...
0
votes
1answer
50 views

Windows Application event logs stooped logging

I am encountered with an issue with the event viewer. The issue is that new application event logs are not logging in the file(archive). And if I try manually generate an error log in "application" it ...
0
votes
0answers
76 views

SD card insertion log in Windows

[Windows 10] Is it possible to find any event which will inform me when I inserted SD card to my notebook (by internal SD card reader)? I though about eventlog in Microsoft-Windows-DriverFrameworks-...
0
votes
1answer
212 views

How can I track successful logins and disconnects?

I am trying to track every time a user remotes into a computer and every time they disconnect. I am using Powershell to do this. This is what I am using to do this Get-WinEvent -Computer $env:...
0
votes
0answers
259 views

Event Viewer Subscription - Connection fails at 'minimal latency' setting

I'm trying to centralize logs from a AD Domain Controller on a collector server using Event-Log subscriptions. I already did all the necessary settings with WinRM (winRM quickconfig) and enabled the ...
0
votes
1answer
36 views

Can Windows Event Log capture fewer events?

Is it possible to configure the Event Log to record only events above a specific severity level? On one Windows 10 Home PC, there are currently 1,123 separate Event Logs, from AMSI/Debug to Windows....
0
votes
2answers
718 views

Viewing Windows 10 event log in “follow” (real-time) mode in terminal?

In Linux, if I want to observe the system log in terminal in real-time, I can use the tail command to output the /var/log/syslog file with the -f or --follow switch, which "output(s) appended data as ...
1
vote
1answer
2k views

How to prevent Firefox from crashing caused by PayloadRestrictions.dll error on company device

On my company device, Edge and Firefox ESR are installed by default and should be used as main browsers. Since I'm developing web applications, I use Firefox and Firefox Dev Edition regularly, which I ...
0
votes
1answer
209 views

I'm looking for some specific events in the Windows Event Log, how can I look for them using Powershell?

The security patches released by Microsoft a few days ago can cause some Bluetooth devices to stop working. The release notes explain how to check whether we will be affected: we have to check the ...
2
votes
1answer
798 views

Get/List all windows event log events in the last n minutes in powershell

After I encounter an error or issue, I'd like to quickly review events for the last several minutes to see if there is any helpful information. The trouble is, I don't know which particular log might ...
0
votes
0answers
9 views

What sort of Event Descriptors in Windows indicate driver errors?

I was looking at Security Event Descriptors for Windows, and I realized that I don't know what their equivalent is for Windows Driver errors, (although I know their source is the system event log) ...
0
votes
0answers
12 views

Azure Log Analytics Query - Comparing Two Time Windows

Below, I am trying to compare the disk space of a window of one hour against the disk space one hour previous to the bin. I have the following join, but it doesn't give me the right time frames to ...
1
vote
0answers
451 views

How can I filter Windows Event logs by Task Category?

I'm using PowerShell and "Get-WinEvent | ? { $_.Id -eq X }" to filter by IDs, but I really want to look at all events by their Task Categories as seen in the Windows Event Viewer GUI application. I ...
1
vote
0answers
498 views

How to remove permanently custom view from EventViewer?

I have created a custom view in Event Viewer. I deleted the custom view from Event Viewer, the custom view disappear, then I launched Event Viewer again but the custom view reappeared. Windows 10 ...
0
votes
0answers
18 views

Event ID 41, 6008 nog logged after a power loss

For what reasons a Windows server (2003) will not log an event ID 41, 6008 if it did indeed had a power loss?
0
votes
0answers
43 views

PC Restarts without prompt

My PC (R7 2700X) will at some points randomly restart. I believe it is a reset (hard reboot), not a proper restart, because the windows event log shows that the power off was unexpected. After the PC ...
0
votes
0answers
276 views

storahci events in event log

I'm seeing hundreds of storahci events ID: 129 events lately. Particularly after windows 10 has waken from sleep. Message is "Reset to device, \Device\RaidPort1, was issued." There are also evet ID ...
0
votes
1answer
251 views

Does Windows EventLog drops off old items as new items are added?

Does the Windows EventLog automagically truncate or drop off items ? (Windows 10 Pro). Refer to my screenshot. First item shown is 15/3/2019 at 7:32:12 PM When i first looked at the log I am ...
2
votes
2answers
547 views

Write to Windows Event Viewer from log file

I have a log file "logs.log" that include the status of one of the applications, and I want to write these logs in Windows Events Viewer. the output in that file as below: 24/01/2019 16:33:26 app(...
1
vote
1answer
415 views

How can I make Windows Task Scheduler fire an event when there's a change of power source detected?

I've written a script that successfully sends me a Telegram message describing the battery state of my PC. I'd like Task Scheduler to run the script when the power source changes, so that when the ...
1
vote
0answers
32 views

Moving an event log source is not having an effect

I'm having an issue that to be clear I'll describe in steps: I created an event source called Foo in the event log called Application using the following powershell command: New-EventLog -source Foo -...
0
votes
1answer
18 views

How to log Excel and Word filenames open by me since 1 or 2 days?

Currently, I have written VB.net program named Extract-Working-Time that read Windows SECURITY event. This program work correctly and extract all actions I have done on my PC. In event viewer LOG ...
0
votes
1answer
604 views

Establishing a real time event trace consumer in Windows 10

I am trying to use software like "Message Analyzer" and "TraceView" to receive event from "Microsoft-Windows-Security-Auditing" or "Microsoft-Windows-Eventlog" Providers, but I had no luck with ...
0
votes
1answer
376 views

How to filter out user keyboard only login times from the 4624 Event Log data?

I am trying to filter out from the Security Event Log, those logs which correspond to the user (me) logging in by typing out password on the keyboard. I would like it to detect unlocking the screen as ...
1
vote
0answers
32 views

Windows 7 doesn't generate wake event in system log [duplicate]

I set up a scheduled task to run with this event as a trigger: Log: System Source:Power-Troubleshooter Event ID: 1 But I don't see any event in the system log. The only event which time is nearest ...
0
votes
0answers
395 views

Get history of IP configuration changes

I have monitored some problems with the IP configuration during job execution. It looks like the DNS server name and the domain suffix is changed sometimes. I would like to find corresponding events ...

1
2 3 4 5
7