Questions tagged [events]
The events tag has no usage guidance.
118
questions
0
votes
1
answer
23
views
Does Event Viewer just allows you to view the logs of the user profile that is logged into the computer?
Does Event Viewer just allows you to view the logs of the user profile that is logged into the computer?
0
votes
0
answers
18
views
Run a task before windows 10 hibernates
I've set up a task to be triggered by a filter with this query
<QueryList>
<Query Id="0" Path="System">
<Select Path="System">*[System[Provider[@...
1
vote
0
answers
88
views
same fd in multiple epoll instances for seperate writing and reading threads
can we use the same fd in multiple epollfds? I mean one epoll instance for catching EPOLLIN, one epoll instance for catching EPOLLOUT.
for example:
int fd = ... // the file descriptor
int epoll_reader ...
- 13
0
votes
1
answer
27
views
Is it possible to find out (retrospectively) when a file was deleted from standard Windows 7 logs?
My mother-in-law has a problem at her workplace: when she came back after a day off, a folder with important files was gone from the desktop, the trash bin also emptied, with several weeks' worth of ...
- 3
0
votes
0
answers
76
views
How to show target username in custom event viewer view?
When going to Event Viewer -> Custom View -> My Custom View where I have the following querylist:
<QueryList>
<Query Id="0" Path="Security">
<Select Path=...
- 195
0
votes
0
answers
58
views
Win10 Event 534 - Disk Problems
i just built a new pc with a fresh win10 pro installation. but from the beginning, i'm getting lots of events 534 in the eventmanager.
Miniport logs an error for device(Port = 0, Path = 2, Target = 0, ...
- 1
0
votes
0
answers
17
views
WinEvent 2 searches with 1 script
I have two event log searches that I would like to combine and produce one output. The scripts work separately but I can't figure out how to combine them. I can't put both filters in the hashtable ...
- 1
0
votes
0
answers
198
views
How do I disable a keyboard in Linux which is not running X11
In Linux, if you have Xorg running, you can disable a keyboard by using xinput float X where X is the numerical input id of the keyboard.
My question is whether there is something similar for a Linux ...
- 101
0
votes
1
answer
2k
views
How to daisy chain tasks in the Windows Task Scheduler to run consecutively?
When one scheduled task is completed, I want another task to start immediately after. Task #1 already has 32 actions, so I cannot add another action. So I figured "Oh, I'll just split my single ...
- 513
0
votes
1
answer
12k
views
What is the user logon id 0xe37 in event logs
I have a lot of event logs where the user logon id is 0xe37 or 0xE37. I am under the impression that a logon id changes after a reboot. Many of these logs are stating that a query into an account with ...
- 1
1
vote
1
answer
74
views
Excel gannt chart one event with multiple duration
I'm working on a large dataset which I need to plot a timeline in gantt chart fashion (horizontal bars with y-axis the event/task and x-axis time) but one event/task has multiple duration for instance ...
- 113
0
votes
0
answers
38
views
Store a class module as a variable
I wrote some code in a class module and userform_initialize_event. All are okay. But when I Dim the new class module and applies in the initialize event it says that variable not defined.
Here is my ...
- 84
0
votes
2
answers
224
views
Working with Batch File
I'm in need a bat file to clear Event Viewer logs and re-boot computer...or help in modifying the ones I already have so that once ran from an administrator prompt, it'd clear the logs...and reboot ...
- 31
6
votes
1
answer
2k
views
How can I determine whether a Windows logoff was manual or automated?
Here are two common ways users can be logged off of Windows:
Manual: The user logs off manually
Automated: The windows system logs off the user automatically via some mechanism
Is there any way to ...
- 514
0
votes
1
answer
104
views
How to know if I was working during the day or during the night?
I am working with my computer (Windows 10 Enterprise), sometimes during the day and sometimes during the night. I don't switch off my computer when I go at home.
Is there a way (like in the event ...
- 1,921
1
vote
0
answers
1k
views
How to use Get-WinEvent to get all information between a specific time period?
Some background
I am encountering some crash and freeze issues I want to get a better handle on. For this, I want to investigate all available event & log information for a specific time period.
I ...
- 396
0
votes
1
answer
2k
views
Does a scheduled task in Windows that is triggered by an event run continually?
I created a scheduled task in Windows 7 that is supposed to be triggered when an event happens. Well, the event happened, and the action did not get performed?
Does a scheduled task in Windows that ...
0
votes
0
answers
15
views
Auditing relevant data and then extracting it
I've turned on (and then off again) auditing on our Fileserver (windows 2012r2)
We have about 8 directories that are being written to and have about 50 directories in total.
I have added auditing onto ...
0
votes
1
answer
2k
views
MS Outlook : Method to import reoccurring events (i.e. birthday list)
Starting-point is an Excel-List containing the names and dates of birth for a lot of person. Those should be imported to Outlook as event series (yearly reoccurring event).
Outlooks CSV-import doesn't ...
- 1
2
votes
1
answer
2k
views
How to find when a user is started and ended a session on computer based on Windows Event Log?
As part of some research I need to collect working hours of all the workers in my company. I have no code execution of their PCs, but I can collected any type of event log from their computer.
I need ...
- 145
0
votes
1
answer
884
views
About - Lenovo System Interface Foundation Driver
Yesterday I opened Event Viewer on Windows 10 and I saw some warnings and 1 error about ESENT 455 (That error was easy to fix by putting some missing files in the right place and now it's ok). ...
- 75
0
votes
1
answer
118
views
How does alarm or any other time based applications work?
I have always been wondering that when we set an alarm on our mobile device, it keeps on checking the system time and tries to match it to the value set. This way, alarms might consume lot of CPU ...
57
votes
6
answers
9k
views
Removing annoying click-handling logic from websites
There are a lot of websites out there that block your ability to right click or select text. I believe it's done as a sort of half-assed security measure to prevent people from copying text or images. ...
- 5,101
1
vote
1
answer
493
views
Run a task when screen sleeps
I have a task in task scheduler and I want to run this task once the screen sleeps not the computer. I’ve tried setting the Trigger to be “On Idle” but didn’t work, and I tried setting the trigger to ...
- 471
1
vote
1
answer
1k
views
Powershell Monitor Clipboard Change
I'm trying monitor clipboard change by powershell, and not consider to use comparing (Get-Clipboard) before and after change because it cannot distinguish between "two copy are identical" and "haven't ...
0
votes
0
answers
249
views
FileSystemWatcher does not hear events when application changes files
I have a Powershell Core script that uses FileSystemWatcher to listen for changes in a directory recursively. It behaves as expected when a user uses Windows Explorer or a shell to add or modify a ...
- 255
0
votes
1
answer
2k
views
Does/can Windows 10 keep track of file moves/copies/shortcut creations?
Numerous times a day, I get the feeling that I accidentally created a shortcut in File Explorer, or that I accidentally copied or moved a dir/file.
I keep looking for the "History box", but then ...
1
vote
1
answer
744
views
How to log Custom Views in Event Viewer (Windows Server 2012 )
I created a Custom View in Event Viewer (Windows Server 2012) that displays events from by a specified source (Sugar2SvcNow Log in attached screen shot). I'm trying to save all the events in this ...
- 135
1
vote
1
answer
45
views
View historical record of applications used on a PC
I want to access the exact time at which I turned on/off a program on windows 10. How can I find such records?
e.g. "Word.exe is started at 09:10 and terminated at 12:03."
I cannot find this in the ...
- 215
0
votes
0
answers
541
views
Event external display
Does anyone know which event and event ID is triggered when an external monitor is connected and disconnected?
I can't seem to found an answer online.
What I would like to use it for is when the ...
0
votes
1
answer
75
views
Any way to see what processes are filtering or reassigning events? And/or can OS do this itself?
I've downloaded the respected utility X-Mouse Button Control, which can translate button events into other events. Autohotkey is another such application.
I believe my work PC has some utility, ...
- 313
6
votes
2
answers
34k
views
Computer randomly shuts off and restarts with Reason Code: 0x500ff
My buddy's computer keeps randomly restarting. Usually when he's playing a game. It has randomly restarted just when he's on YouTube.
Event Viewer says:
The process C:\Windows\system32\winlogon....
- 61
0
votes
1
answer
193
views
Does the time change on thin clients to sync up to what application say the time is?
I know this question is not put the best way and I can edit it to read better after I have a better understanding of this. We are using a Windows 10 Enterprise environment that is VMI and VDI based. ...
- 227
2
votes
2
answers
2k
views
Write to Windows Event Viewer from log file
I have a log file "logs.log" that include the status of one of the applications, and I want to write these logs in Windows Events Viewer.
the output in that file as below:
24/01/2019 16:33:26 app(...
- 21
2
votes
1
answer
532
views
Windows - automatic backup of usb drives
I'm very prone to lose usb dongles, I want now to configure windows 'scheduled task' that each time it sees an event with 'insertion' of my drive it copys all the content in a specific folder (c>\...
- 671
0
votes
1
answer
192
views
Run a program when display orientation changes
I've been messing with task scheduler on a tablet recently (completely new to this), mostly for visual things atm. There is a program I run that I need to restart every time the device changes ...
- 1
-4
votes
2
answers
98
views
Business reason for an Analyst [closed]
One of our IT Security Analysts is out on maternity leave
She had wiped the Windows Event Viewer logs off of a PC. Before we confront her we wanted to find out if there is any business reason for ...
5
votes
2
answers
3k
views
Event Viewer filter by source disabled
I've tried looking around other posts here as well as Microsoft community pages but to no luck.
In my environment (Windows 10), the filtering by source is Event Viewer is blank, and I cannot open ...
- 553
1
vote
1
answer
397
views
powershell : how to detect an uninstalled usb device?
I would like my Powershell script to detect when I plug in a usb device. I have set the GPOs to block the automatic installation of usb devices.
For now I am using this command to detect when a usb ...
- 129
0
votes
1
answer
21
views
Multiple similar information event in a few seceods
I was checking Windows Event Viewer and noticed that multiple exactly similar information events related to my touch pad driver is recorded, all separated by just a few seconds. The event description ...
- 55
1
vote
1
answer
1k
views
Thunderbird Add-on "Lightning": What is the difference between "Event" and "Task"?
If creating some date:
When should I use Event instead of Task and the other way around?
I saw that Task is also supporting start time and due time. Why does that make sense? When do I use which of ...
- 135
0
votes
1
answer
857
views
MS Outlook - Set up alert showing all events for a day at specific hour
Right now, an alert is set by default at 15 minutes before an event to show up as a reminder. However, I'd like to have an alert every day in the morning that tells me which events I have today.
Is ...
- 327
0
votes
1
answer
2k
views
What is the Win 10 Event ID for when a crash dump is created?
What is the Win 10 Event ID for when a crash dump (not the BSOD kind) is created?
- 6,649
1
vote
0
answers
639
views
Measure EPS (Events per Seconds)
I want to measure the EPS metric, or the number of processed events per seconds in my device.
I read that the most accurate measurement of EPS is to use a simple syslog server, such as Kiwi Syslog ...
- 111
2
votes
1
answer
1k
views
On "Power-Troubleshooter" event in Task Scheduler not triggering
I am attempting to run an event via Task Scheduler in order to restart my trackpad driver (code to do so below) every time my system wakes up, as a troubleshooting measure. However, in Task Scheduler, ...
- 143
-1
votes
2
answers
5k
views
How to Create a Windows Task that activates on event in Powershell
Hey I need to create a windows task that acts much like the Logoff Scripts in Group Policy (our environment does not have AD) do. The task needs to run as the logged in user so that the script can ...
- 1
0
votes
0
answers
5k
views
A logon was attempted using explicit credentials. event ID 4648
i am seeing this error on 3 pcs on the network and on our server, they are coming from 1 account that has been deleted and 2 that are still on the PC's. we are on a regular workgroup network with 2012 ...
- 1
0
votes
0
answers
33
views
Is there a generic Android<==>PC app that exists for events? For example, when my phone rings, I want to mute the volume or run a command on the PC
I am looking for an app that talks to the PC through its own event API, allowing me to trigger events on the PC when something happens on the phone.
Similar to how Cerberus App can remote-control ...
- 436
0
votes
1
answer
558
views
Write Windows shutdown time to logfile
I try to automatically log the startup and shutdown times of my Windows Client (Windows 7 and newer) to a log file for later analysis.
Therefore I created a task in Task Scheduler which executes the ...
- 53
1
vote
1
answer
216
views
Windows Startup, Run An Application After Domain Connection Is Ready
I have an old software which does some work on domain as soon as it started. (Like sending a message to the server using MSMQ).
This software should start automatically when computer starts. (When ...
- 255