Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [eventviewer]

This tag is for questions about Windows' Event Viewer. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

This tag is for questions about Windows' Event Viewer and Event Logs. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

Event Viewer has three primary logging areas:

  • Application
  • Security
  • System

Recent Versions of Windows (Vista and later / Server 2008 and later) have a large number of additional log areas.

Most Windows components (such as services) log to the System log, with notable exceptions being IIS and user-related operations (such as folder redirection at login) which log to the Application log. Programs that you write should log either to their own log areas or to the Application log. The Security log records successful and failed logins.

See also:

202 questions
1
vote
0 answers

Server 2019 - Very large number of logon events per second even when not network connected?

I have a domain controller installed in my home office, 1 domain controller, 1 PC, 1 user. I'm running Microsoft Server 2019. When I look in the Security Event log, I see thousands of Logon (Event ID 4624), Logoff (Event ID 4634 and Special Logon…
Mr Fett
  • 127
  • 3
1
vote
0 answers

Scanning all Windows event log folders for an event in a given time interval

When investigating a problem on a Windows client, I regularly find myself looking for relevant event log entries in a pretty well defined timeframe, but with no idea which of the myriad of folders in Windows Event Viewer on the involved client I…
Tilman Schmidt
  • 4,101
  • 12
  • 27
1
vote
1 answer

Windows Event Forwarding via https without Windows domain - no event 104

Following the suggestion in this answer, I'm trying to set up Windows Event Forwarding by following this Microsoft's guide: Setting up a source initiated subscription where the event sources are not in the same domain as the event collector…
Paul
  • 113
  • 4
1
vote
1 answer

Using Event Filter in Task Scheduler looking for specific keywords

I hope you can help, sometimes a backup task will fail, usually a transient VSS error, and re-running the backup will normally complete successfully. What I am trying to do is use the event filter within Task Schdeuler to trigger the backup to…
RobC_CTL
  • 13
  • 4
1
vote
0 answers

Windows Event Filter to Trigger A Scheduled Task Using Custom Data

I need to create a custom event filter to trigger a scheduled task to recover a hung process. Here is the event log in XML format:
Nime Cloud
  • 466
  • 1
  • 4
  • 17
1
vote
1 answer

Info about Event logs (Active directory)

Recently 3 of my Active directory admins are unable to login to AD server through RDP. After we cross checked everything, we found these 3 users are added in one security group called "Deny RDP access" after i removed users from this group they are…
Akhil RAM
  • 11
  • 2
1
vote
0 answers

Web management service not start on reboot

Server 2012R2 with management service. Whe reboot the server, the service not start automatically. If i start it manually, it start successfull. There are these events on event viewer: Service Control Manager - Event 7024 The Web Management Service…
Mos242
  • 11
  • 1
  • 3
1
vote
0 answers

How to get details of the event that triggered a task

A service that we are using writes to the event log when issues occur. I have successfully created a task from the event source and id to run a program that notifies the admins. So far, so good. Unfortunately, the event source and id are always…
Hannes
  • 51
  • 1
  • 4
0
votes
1 answer

How to filter Event Viewer for a single website?

I am trying to find out each concurrences for an error happening on a website I managed to create an XML query to filter by EventID