Questions tagged [event-viewer]

Windows Event Viewer is a utility that shows users logs of events generated by the Windows operating system, and applications/services running on Windows.

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

ISO of Task Scheduler / Event Viewer Help Specifically with Logitech Lightspeed Activity

I'm trying to automate a task. When I want to automate the audio toggle trigger by the headset being turned on or off. When turned on, I'd like to switch audio input/output to the headset. When turned ...
user avatar
1 vote
1 answer
73 views

Windows 10 security mitigations blocking chrome.exe from generating dynamic code

Looking in Application and Service Logs -> Microsoft -> Windows -> Security Mitigations -> Kernel mode, I seem to have two programs that consistently appear in here: steamwebhelper.exe' (...
user avatar
0 votes
1 answer
70 views

Remote Desktop installation in Event Viewer - not triggered by me

This issue is for Windows 10 operating in a home environment. I was looking in Event Viewer for another reason and have found a recurring message that is concerning to me: Windows Logs -> ...
user avatar
  • 1
0 votes
0 answers
11 views

More problems of Summary Page Events of event viewer

It doesn't matter to me about how old windows 7 is and how outdated it is but he answers to the, how to recover "Summary Page Events" folder in Event Viewer (Windows 7)? Causes more problems ...
user avatar
0 votes
0 answers
35 views

Windows 10 randomly shutdown and cleared system logs at startup

I have a windows 10 desktop that shutdown unexpectedly. I didn't see it happen but it randomly went offline. When I booted it back up and the first event, per the event logs, was a "log clear&...
user avatar
0 votes
0 answers
11 views

Task Scheduler to start Vive Wireles on Steam Vr boot up event

Just got my wireless adaptor for Vive Pro 1 and need to launch a program "Vive Wireless" whenever Steam VR opens. Doing this manually has lead to several instances of me forgetting, so I ...
user avatar
0 votes
1 answer
38 views

How to know if I was working during the day or during the night?

I am working with my computer (Windows 10 Enterprise), sometimes during the day and sometimes during the night. I don't switch off my computer when I go at home. Is there a way (like in the event ...
user avatar
  • 1,438
1 vote
2 answers
7k views

How to resolve "server could not bind to the transport \Device\NetBT_Tcpip_<UUID> because another computer on the network has the same name" errors?

What is the meaning of the below event viewer error and how to resolve it? The server could not bind to the transport \Device\NetBT_Tcpip_{645D56E9-F6B3-44C1-B7C9-B5A0503A76ED} because another ...
user avatar
0 votes
0 answers
155 views

Does the "PlatformRollbackMethod" Windows Defender event indicate an issue?

For about a month I've been seeing this "PlatformRollbackMethod" in event viewer (Microsoft-Windows-Windows Defender/Operational) Is this a common event, or an unusual one that might ...
user avatar
  • 87
0 votes
2 answers
66 views

Windows Event Viewer Event Information

I am looking for information on a few specific Windows Event Viewer events that appear to occur on a system that I am using that has unexpected behavior. I can look through the event viewer and save ...
user avatar
0 votes
0 answers
21 views

What are the "setup" Events in Windows Event Viewer Logging?

I'm getting more familiar with the Windows Event Viewer for a recent IT job, and I'm unsure about what "setup" events are being logged in the Windows Event Viewer. The MS documentation says ...
user avatar
0 votes
0 answers
42 views

Event Viewer crashes when saving an event to disk

I'm trying to resolve a persistent crash bug in a game, but the Windows 10 Event Viewer hangs every time I try to export one of the crash events to a file. I do most of my browsing on a Macbook, so I'...
user avatar
  • 123
0 votes
1 answer
86 views

Running Program in Windows When Not Connected to Specific Network

I have a Windows 10 PC and a VPN client which does not have a trusted networks feature. I would like to automatically run the client when not connected to my office corporate network or guest WiFi ...
user avatar
0 votes
0 answers
41 views

connections such as USB and bluetooth randomly resets at once, and computer randomly powered off once

so i bought a new computer, and is in the process of moving the files. the problem is while the files are being moved from the usb drive to my computer, the progress bar randomly and frequently says ...
user avatar
4 votes
2 answers
328 views

Event ID 4723 - An attempt was made to change an account's password. + Event ID 4625

I was going through Event Viewer to track down a software issue and came across these security logs: Event ID 4723 An attempt was made to change an account's password. Subject: Security ID: SYSTEM ...
user avatar
  • 145
1 vote
1 answer
247 views

Querying event viewer in cmd

Various sources such as this one suggest using a eventquery.vbs on the system to query the event log from cmd. Apparently my stock install of Windows 10 is missing that file: Microsoft Windows [...
user avatar
0 votes
2 answers
97 views

Information missing from Reliabiliy Monitor after windows update

After installing Cumulative Update July 2021 for Windows 10 21H1 KB5004237 I have got the following errors on my computer. Reliability Monitor doesn't show all the events. The following are missing. ...
user avatar
  • 639
2 votes
0 answers
58 views

Windows AD event to detect new administrator user

I would like to know which event ID can be monitored in order to check if an existing user or a new one become administrator. I search for 4720 and 4738 event IDs but the information displayed in the ...
user avatar
  • 121
0 votes
1 answer
52 views

Kernel-power CRITICAL on Event Viewer led to PC Shutdown everytime

So i checked my event viewer on why does my PC shuts down by itself, before shutdown theres a "bbzzzzzzz" sound, its like a sound lags. Then all my display freezes, after a few second, my PC ...
user avatar
1 vote
2 answers
120 views

User Logon Script - Display additional network information

I have a GPO which runs a PowerShell script on user logon for a particular user. GPO Location: This script sends an email whenever the user logs onto the domain, this email contains the computer name ...
user avatar
  • 33
0 votes
1 answer
79 views

Possible detection of CVE: 2021-04-23 logged in event viewer (23/04/2021 @15:54:16)

A Possible detection of CVE: 2021-04-23 logged in event viewer (23/04/2021 @15:54:16) I am currently scanning my machine, but will Win Defender be able to remove the infection? Randomly I've been ...
user avatar
2 votes
0 answers
82 views

Why couldn't I find sysmon events in Event Viewer?

I installed sysmon using the below commmand as documented sysmon64.exe -accepteula -i And I can confirm it's running with the command Get-Service Sysmon64 in PowerShell. However I couldn't see ...
user avatar
  • 23.3k
0 votes
1 answer
31 views

Query Security Events in Windows 10

I enabled Object Access auditing on my Windows 10 laptop using the instructions on this page. I then enabled auditing on a file (i.e. Sleep Times.csv). I accessed the file and manually looked ...
user avatar
  • 1,218
0 votes
0 answers
91 views

ErrorCode 87 in Event Viewer

On my Windows 10 sometimes I hear sound indicating that a device that was connected either via USB or Bluetooth was removed but I don't know which device was it and notifications pane doesn't have ...
user avatar
0 votes
1 answer
59 views

Is there a way to filter Windows Event Logs by user?

I have my kid using my computer with a separate account and I would like to see all the events triggered by his user account. Is there a way to do this either with the Event Viewer or Powershell?
user avatar
  • 31
-3 votes
2 answers
192 views

Have I been hacked?

I recently received my laptop from repair and I just had a hunch that something fishy might have happened so I checked the log files on Windows Event Viewer and it turns out that my laptop has been ...
user avatar
1 vote
0 answers
83 views

Start up items doesent load properly [closed]

Here are my system specs; all new components: Ryzen 5600x 2x8gb G.Skill Trident Neo Z 3600 16/19/19/39 X570 MSI Tomahawk Wi-Fi (latest BIOS) Corsair Force Series MP600 Gen. 4 MSI Gaming GeForce RTX ...
user avatar
0 votes
0 answers
33 views

How can document bad internet performance frequency over certain time period?

Recently, due to bad quality of internet in my new flat, I tried to figure out to document internet-drops logs over a certain period of time (not asking about when a connection is made or lost, but ...
user avatar
  • 101
2 votes
1 answer
22 views

Does EventViewer have a process I can run directly?

I'm working on foreign language test system and I struggle to find standard Windows Utilities like Event Viewer as they have different names. Does the Windows Event Viewer have a .exe I can run ...
user avatar
  • 4,676
0 votes
2 answers
94 views

Task scheduler advanced action Filter

I managed to set an action in the Task scheduler that is triggered at the validating of the network setting changes: by subscribing to events from the register Microsoft-Windows-Diagnostic-Networking/...
user avatar
1 vote
0 answers
7k views

What is the cause of this windows Event Error: CbsPackageServicingFailure2

I'm having an issue figuring out what the cause of the error below is. This error is appearing in the windows logs every ten seconds. I'm worried about what could happen to the system with this error ...
user avatar
0 votes
1 answer
77 views

Kernel Power Failure - Regular and Periodic pattern

My PC is freezing and then rebooting. Event viewer reports a kernel power (event ID: 41). It happens every 3 days in the evening. Given this periodic pattern, does this help diagnose the issue? I ...
user avatar
1 vote
0 answers
64 views

Windows EVTX Delete Via RecordId

I am trying to figure out a way to delete only a single entry (identified via EventRecordID, found in the Details > XML View) from a Windows Log file (.evtx extension). Tried so far via PowerShell, ...
user avatar
1 vote
1 answer
65 views

Audit registry access or modification

I want to audit registry modifications, or attempts in case of failure. For that purpose, I have set the audit policy as follows: auditpol /set /subcategory:"Registry" /success:enable /...
user avatar
  • 121
0 votes
2 answers
117 views

How do you capture programs/scripts that run and quickly disappear in Windows 10?

I have noticed that a CMD script seems to randomly run while doing things but cannot seem to capture what or where it's coming from. Is there a way to use some sort of logging app to see what comes ...
user avatar
2 votes
1 answer
14k views

How to tell which service or task caused a certain 4624 logon event?

I found a series of Windows logon events 4624 like this: An account was successfully logged on. Subject: Security ID: SYSTEM Account Name: mycomputername$ Account Domain: ...
user avatar
2 votes
2 answers
179 views

Identify the command run after a UI click

I'm looking for something similar as in here: How to know the corresponding command line cmd for the UI click? But in my case, under Windows 10 OS. More specifically, the command run after a UI click ...
user avatar
  • 23
0 votes
0 answers
121 views

AD Account are being locked but only some are showing as 4740 in Domain controller

We have been seeing increasing number of AD Account lockouts. Some of these lockouts show up in event viewer as 4740 events but most do not show up at all. My account has been locked out almost once ...
user avatar
  • 806
1 vote
0 answers
145 views

Computer freezing, lagging and crashing randomly

My 3 year old computer is recently crashing multiple times each day with no tracable sources. It happens randomly; when gaming, watching videos or even idling... The temperature is of the CPU is fine. ...
user avatar
  • 11
1 vote
0 answers
392 views

detect USB C/ Thunderbolt 3 connection in event viewer?

I have recently made a simple PowerShell script that upon connection of a PnP device checks whether a "razer naga" mouse is connected and runs the synapse software. Upon disconnection of the device, ...
user avatar
0 votes
1 answer
378 views

WMI Service Host using a high amount, 10-20% CPU a lot of the time

On my Windows 10 laptop, the application WMI Service Host is using a considerable amount of CPU time and spinning the fans up. This is not normal operation. WMI should be called somewhat rarely. I can'...
user avatar
  • 33
2 votes
2 answers
5k views

What time zone does windows event logs show

I have a doubt on the time zone shown in the windows event logs. I had read that if I export the windows event logs from another machine and open it in my machine which has a different time zone, the ...
user avatar
1 vote
1 answer
438 views

How to log Custom Views in Event Viewer (Windows Server 2012 )

I created a Custom View in Event Viewer (Windows Server 2012) that displays events from by a specified source (Sugar2SvcNow Log in attached screen shot). I'm trying to save all the events in this ...
user avatar
  • 135
0 votes
2 answers
4k views

How to determine the reason for Windows spontaneous shutdown?

Update 2: Tracking the reasons for a few shutdowns in the past couple of weeks, using the Event Viewer without filtering events, to get to the approximate time of shutdown, it seems like the last few ...
user avatar
  • 2,498
0 votes
0 answers
264 views

Event external display

Does anyone know which event and event ID is triggered when an external monitor is connected and disconnected? I can't seem to found an answer online. What I would like to use it for is when the ...
user avatar
0 votes
1 answer
67 views

How to determine when the pc turns on windows 10?

I want to know when my PC turns on or off. Is there a way to know this? I have admin rights.
user avatar
3 votes
0 answers
380 views

34 GB of commited memory but no app actually commited that much

Sometimes I encounter Out of memory errors and Windows Event Viewer shows this (translated): Resource-Exhaustion-Detector: A lack of virtual memory in the system was successfully detected. The ...
user avatar
  • 180
1 vote
0 answers
21 views

HP ProBook instant shutdown after first logon the day

Every morning my notebook is shutting itself instantly after the first logon with win hello. There is nothing obvious written to the event log. All the following application event raised through the ...
user avatar
  • 111
0 votes
0 answers
298 views

Why Won't Event Viewer, System Information, System Configuration apps launch off the Start menu on my Windows 2016 Server on Azure?

It seems I cannot start Event Viewer, System Information, and System Configuration when I click the Start menu and start typing in their names to search for them; clicking their icons when they appear ...
user avatar
0 votes
1 answer
64 views

Windows Application event logs stooped logging

I am encountered with an issue with the event viewer. The issue is that new application event logs are not logging in the file(archive). And if I try manually generate an error log in "application" it ...
user avatar

1
2 3 4 5