Questions tagged [event-viewer]

Windows Event Viewer is a utility that shows users logs of events generated by the Windows operating system, and applications/services running on Windows.

Filter by
Sorted by
Tagged with
0
votes
0answers
10 views

What makes events 'administrative'? [closed]

I've done some searching on the web but haven't found a good answer. In reference to the events in the event viewer, what makes these events administrative?
1
vote
0answers
35 views

detect USB C/ Thunderbolt 3 connection in event viewer?

I have recently made a simple PowerShell script that upon connection of a PnP device checks whether a "razer naga" mouse is connected and runs the synapse software. Upon disconnection of the device, ...
0
votes
1answer
48 views

WMI Service Host using a high amount, 10-20% CPU a lot of the time

On my Windows 10 laptop, the application WMI Service Host is using a considerable amount of CPU time and spinning the fans up. This is not normal operation. WMI should be called somewhat rarely. I can'...
0
votes
0answers
11 views

How to run Get-WinEvent as a Task Scheduler job in Windows Server 2012

I'm trying to set up a scheduled task in Windows Server 2012 that will periodically save all events in Event Viewer log into a text file. I've put together a command that works well when run in the ...
0
votes
1answer
163 views

What time zone does windows event logs show

I have a doubt on the time zone shown in the windows event logs. I had read that if I export the windows event logs from another machine and open it in my machine which has a different time zone, the ...
1
vote
1answer
39 views

How to log Custom Views in Event Viewer (Windows Server 2012 )

I created a Custom View in Event Viewer (Windows Server 2012) that displays events from by a specified source (Sugar2SvcNow Log in attached screen shot). I'm trying to save all the events in this ...
0
votes
1answer
120 views

How to determine the reason for Windows spontaneous shutdown?

Update 2: Tracking the reasons for a few shutdowns in the past couple of weeks, using the Event Viewer without filtering events, to get to the approximate time of shutdown, it seems like the last few ...
0
votes
0answers
44 views

Event external display

Does anyone know which event and event ID is triggered when an external monitor is connected and disconnected? I can't seem to found an answer online. What I would like to use it for is when the ...
0
votes
1answer
56 views

How to determine when the pc turns on windows 10?

I want to know when my PC turns on or off. Is there a way to know this? I have admin rights.
3
votes
0answers
105 views

34 GB of commited memory but no app actually commited that much

Sometimes I encounter Out of memory errors and Windows Event Viewer shows this (translated): Resource-Exhaustion-Detector: A lack of virtual memory in the system was successfully detected. The ...
0
votes
0answers
69 views

How to determine the process that created a specific task in Windows’s Task Scheduler

I want to be able to determine what process (PID, process name/path) created a task in Task Scheduler. Currently, I am aware of two relevant Windows events: Microsoft-Windows-Security-Auditing Event ...
0
votes
0answers
30 views

How to Spy on my low-level user Event Stream?

I'd like to see at a low level all the events being generated by me to the computer: key presses, mouse movements, and especially button presses. Unix X-Windows has something that does this (albeit ...
1
vote
0answers
16 views

HP ProBook instant shutdown after first logon the day

Every morning my notebook is shutting itself instantly after the first logon with win hello. There is nothing obvious written to the event log. All the following application event raised through the ...
0
votes
0answers
84 views

Why Won't Event Viewer, System Information, System Configuration apps launch off the Start menu on my Windows 2016 Server on Azure?

It seems I cannot start Event Viewer, System Information, and System Configuration when I click the Start menu and start typing in their names to search for them; clicking their icons when they appear ...
0
votes
0answers
45 views

Why is there no IDE runtime event present in Windows kernel event log?

Would you please explain me what's a reason I'm not having any records in Windows Event viewer after my IDE-run program encounters an exception like EXCEPTION_FLT_OVERFLOW? I use Visual Studio to ...
0
votes
0answers
293 views

Name resolution for the name **** timed out after none of the configured DNS servers responded

Normally the **** in the title is a domain name, or internet web site name, but today I found several strange 'names' in System log with source from DNS Client Events (1014) viewed in Event Viewer. ...
0
votes
0answers
126 views

Finding USB Event Logs for Windows 7

I am trying to find the Windows Event code for when a USB is inserted into a Windows 7 machine. From the Event code, I would like to identify when a user writes, copies, modifies and deletes a file to/...
0
votes
1answer
50 views

Windows Application event logs stooped logging

I am encountered with an issue with the event viewer. The issue is that new application event logs are not logging in the file(archive). And if I try manually generate an error log in "application" it ...
0
votes
1answer
211 views

How can I track successful logins and disconnects?

I am trying to track every time a user remotes into a computer and every time they disconnect. I am using Powershell to do this. This is what I am using to do this Get-WinEvent -Computer $env:...
1
vote
0answers
40 views

Windows 7 Event Viewer - Save logs in real-time

I recently changed event viewer to save logs to an external drive then restarted my computer. It's working fine, however, the logs aren't being written in real time. When I open Event Viewer, it ...
0
votes
0answers
259 views

Event Viewer Subscription - Connection fails at 'minimal latency' setting

I'm trying to centralize logs from a AD Domain Controller on a collector server using Event-Log subscriptions. I already did all the necessary settings with WinRM (winRM quickconfig) and enabled the ...
0
votes
0answers
39 views

Can't access Event Viewer logs after a BSOD

I hope this is an okay place to ask this. My issue is fairly similar to this StackOverflow post that was closed and directed to SuperUser. However, I'm on Windows 10 and the hotfix, even if ...
0
votes
0answers
140 views

Powershell Get-winevent “The request is not supported” Error

I'm trying to read an evtx event file generated by wusa but Get-WinEvent is just throwing an error. PS> Get-WinEvent -path .\install.evtx Get-WinEvent : The request is not supported At line:1 char:...
1
vote
0answers
494 views

How to remove permanently custom view from EventViewer?

I have created a custom view in Event Viewer. I deleted the custom view from Event Viewer, the custom view disappear, then I launched Event Viewer again but the custom view reappeared. Windows 10 ...
0
votes
0answers
43 views

PC Restarts without prompt

My PC (R7 2700X) will at some points randomly restart. I believe it is a reset (hard reboot), not a proper restart, because the windows event log shows that the power off was unexpected. After the PC ...
1
vote
0answers
44 views

Disabled Local Policies:Audit Policy, but Event Viewer is still displaying Security Logs

I disabled all types of auditing for both successes and failures in: Local Security Policy > Local Policies > Audit Policy but when I go to Event Viewer > Windows Logs > Security, logs are still ...
0
votes
1answer
38 views

Does the time change on thin clients to sync up to what application say the time is?

I know this question is not put the best way and I can edit it to read better after I have a better understanding of this. We are using a Windows 10 Enterprise environment that is VMI and VDI based. ...
1
vote
2answers
1k views

The IO operation at logical block was retried and CRC errors in S.M.A.R.T

I have a Samsung 850 Evo (250GB) SSD since December 2016 (2+years). In February this year my system started to lag and while digging in Event Viewer I saw Event 153 + CRC error count in SMART go up. ...
0
votes
1answer
249 views

Does Windows EventLog drops off old items as new items are added?

Does the Windows EventLog automagically truncate or drop off items ? (Windows 10 Pro). Refer to my screenshot. First item shown is 15/3/2019 at 7:32:12 PM When i first looked at the log I am ...
0
votes
1answer
114 views

How to Remove a task from Event Viewer

Just attached a task to a security (Event Viewer > Windows Logs > Security) event on Event Viewer, but now it seems not possible to change it or even remove it. Does anyone knows where it could be? ...
0
votes
0answers
126 views

Windows 10 Event Viewer: Asks for disk check on non-existing volume

When checking the event viewer, Windows will log the following error: Volume \?\Volume{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} {\Device\0000003f} needs to be taken offline for a short period to ...
0
votes
0answers
503 views

Memory exhaustion with apparently no process exhausting it

I am suffering memory exhaustions on a Windows 10 computer nearly every three days, with no pattern to reproduce (sometimes after PC is powered on for days, sometimes just after power on, sometimes ...
4
votes
2answers
2k views

Event Viewer filter by source disabled

I've tried looking around other posts here as well as Microsoft community pages but to no luck. In my environment (Windows 10), the filtering by source is Event Viewer is blank, and I cannot open ...
1
vote
0answers
156 views

Errors in Administrative Events in Event Viewer Error 10016 [duplicate]

Currently, I am facing multiple BSOD and when I check the reasons why, I always come across error which come from the DistribtutedCOM. The message comes as followed, The application-specific ...
0
votes
1answer
18 views

Multiple similar information event in a few seceods

I was checking Windows Event Viewer and noticed that multiple exactly similar information events related to my touch pad driver is recorded, all separated by just a few seconds. The event description ...
3
votes
1answer
510 views

Why is Event Viewer is no longer populating the dropdowns for Event Source and Event Logs on Windows 10 1803 clean install

I have recently formatted and installed the latest build of Windows 10 from iso 1803 17134.48. When I go to Event Viewer and either go to Create Custom View or Filter Current Log the dropdown boxes ...
1
vote
0answers
603 views

Frequent, random audio crashing; Event Viewer log packed with “Engine glitch[es]”

[Rewritten for conciseness and clarity.] My setup: I have a PreSonus AudioBox USB connected to my laptop (Asus G750Z-DB73) via USB 3.0. The AudioBox driver, bundled with the app “Universal Control”, ...
3
votes
2answers
1k views

Display event details in message when attaching a task to an event

When I try to safely remove hardware, Windows 10 tells me that a program is using the hardware, but doesn't tell me which program it is. I found that this information is recorded however in Event ...
1
vote
0answers
728 views

Dozens of Windows Error Reporting messages each second

I was investigating other problem and suddenly found, that my Event Viewer is full of Windows Error Reporting occurring dozens times per second: Example of message is: Fault bucket , type 0 Event ...
1
vote
1answer
73 views

Custom filter for all event logs that apply for new logs as well

I know you can create default filters for your local event logs. When I support customers I often receive an .evt file that I have to look through. I begin every search by going to filter, scrolling ...
1
vote
1answer
922 views

Windows 10 System Wide Pauses

I have a rather serious issue on Windows 10 Enterprise 2016 LTSB 32-bit: On this machine an application is running 24/7 with a lot of networking going on. In total there are 14 network ports. ...
0
votes
1answer
157 views

How to tell when I logged in?

I want to find out when I logged into my machine on a given day. In the Event Viewer, Windows Logs, Application, I see entries like: Level Date and Time Source Event Id Task ...
1
vote
0answers
503 views

Kernel-Power error (41) without anything wrong

I'm using Windows 8.1 and after reboot/power on, I see Kernel-Power error (Event ID 41) on Event Viewer. It doesn't cause anything to happen for more than 2 years, no sudden reboots etc. but I wonder ...
0
votes
1answer
2k views

Windows 10 - Get first logon and last logoff for each day for date range

I'm looking to see if there's a way to parse eventvwr to get the first logon and last logoff on a particular PC for each date in a range. I don't need to get any particular user... just first and last ...
0
votes
1answer
315 views

Open Event Viewer from Setup

I am currently trying to install Windows 10. Unfortunately the setup states it was unable to create a partition on my SSD. Details should be in the Setup Log. To view this I presumably need the Event ...
0
votes
0answers
444 views

windows based PC freeze up after showing event ID 6013

I have a windows based PC that randomly freezes up. when I checked event log, I figured out the latest log was at noon (12:00) after event log 6013.
1
vote
1answer
89 views

windows 10 freeze even if I'm away from keyboard

I have some problems with my system, sometimes it just freeze. I was looking into Event Viewer, but I found nothing suspicious (in my opinion) so here is a screenshot of Windows Logs\System The ...
1
vote
0answers
469 views

Trigger Task Scheduler in Windows 10 when display wakes up

I don't have enough rep to comment on this post so I am posting my own question that is very similar to that post. I have an app I want to run when the computer goes idle, and then quit when I wake ...
1
vote
1answer
64 views

Event Viewer - how to read information

I'm dealing with a situation in which a Windows 10 machine is restarting (or freezing after logon) randomly. It seems that a disk may be the culprit (source is NTFS). However, I could not find how to ...
0
votes
1answer
775 views

System boot time for Windows

I am working on a system diagnostic application and I'm looking for some information on Windows boot up time in different situations. Is there any way I can find the following information on ...