WINDOWS EVENT VIEWER GUIDE


WINDOWS EVENT VIEWER

Event Viewer is a component of Microsoft’s Windows NT line of operating systems that lets administrators and users view the event logs on a local or remote machine. In Windows Vista, Microsoft overhauled the event system.

LAUNCHING EVENT VIEWER IN WINDOWS

The application can be launched using either eventvwr.exe or eventvwr.msc. depending upon your version of Windows.

1)Turn on Event Viewer via Run. Press Windows+R to open the Run dialog, enter eventvwr (or eventvwr.msc) and hit OK.

2)Open Event Viewer via Command Prompt.Open Command Prompt, type eventvwr and press Enter.

3)Click Windows Start button > Type event in Search programs and files field > Select Event Viewer

OTHER WAYS OF LAUNCHING EVENT VIEWER

HOW TO USE EVENT VIEW

EVENT LOG CATEGORIES

Application Log
Any event logged by an application. These are determined by the developers while developing the application. Eg.: An error while starting an application gets recorded in
Application Log.

System Log
Any event logged by the Operating System. Eg.: Failure to start a drive during startup is logged under System Logs

Security Log
Any event that matters about the security of the system. Eg.: valid and invalid Logins and logoffs, any file deletion etc. are logged under this category.

Directory Service log
records events of AD. This log is available only on domain controllers.

DNS Server log
records events for DNS servers and name resolutions. This log is available only for DNS servers

File replication service log
records events of domain controller replication This log is available only on domain controllers.

TYPES OF EVENTS

Information
An event that describes the successful operation of a task, such as an application, driver, or service. For example, an Information event is logged when a network driver loads successfully.

Warning
An event that describes the successful operation of a task, such as an application, driver, or service. For example, an Information event is logged when a network driver loads successfully.

Error
An event that is not necessarily significant, however, may indicate the possible occurrence of a future problem. For example, a Warning message is logged when disk space starts to run low.

Success Audit (Security log)
An event that describes the successful completion of an audited security event. For example, a Success Audit event is logged when a user logs on to the computer.

Failure Audit (Security log)
An event that describes an audited security event that did not complete successfully. For example, a Failure Audit may be logged when a user cannot access a network drive.

TROUBLESHOOTING TIPS

EVENTID — site that contains vast list of event ids and their meanings

1)HOW TO USE EVENT VIEWER TO TROUBLESHOOT PRINTER PROBLEMS
2)HOW TO USE EVENT VIEWER TO TROUBLESHOOT FTP PROBLEMS (IIS)
3)HOW TO USE EVENT VIEWER TO DETECT HACKING AND DATA THEFT
4)HOW TO USE EVENT VIEWER TO TRACK OPERATION OF A PROGRAM I
5)HOW TO USE EVENT VIEWER TO TROUBLESHOOT BSOD
6)HOW TO USE EVENT VIEWER TO TRACK PROGRAMS THAT POPUP AND GO AWAY SUPER QUICK ON PC
7)HOW TO USE EVENT VIEWER TO TRACK PROCESSES
8)HOW TO USE EVENT VIEWER TO TRACK PERMISSION ERRORS
9)HOW TO USE EVENT VIEWER TO TRACK SMB ERRORS I II
10)HOW TO USE EVENT VIEWER TO TRACK FAILED WINDOWS LOGIN ATTEMPTS
11)HOW TO USE EVENT VIEWER TO TROUBLESHOOT OUTLOOK ISSUES
12)HOW TO USE EVENT VIEWER TO TRACK VOLUME SHADOW COPY ISSUES
13)HOW TO USE EVENT VIEWER TO TROUBLESHOOT WINDOWS SERVICES

This entry was posted in PC Support and tagged , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>