Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [eventviewer]

This tag is for questions about Windows' Event Viewer. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

This tag is for questions about Windows' Event Viewer and Event Logs. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

Event Viewer has three primary logging areas:

  • Application
  • Security
  • System

Recent Versions of Windows (Vista and later / Server 2008 and later) have a large number of additional log areas.

Most Windows components (such as services) log to the System log, with notable exceptions being IIS and user-related operations (such as folder redirection at login) which log to the Application log. Programs that you write should log either to their own log areas or to the Application log. The Security log records successful and failed logins.

See also:

202 questions
0
votes
1 answer

Moving Windows event logs without corrupting them

I need to retrieve the event logs from an XP embedded machine which doesn't have the Event Viewer, to an XP pro machine with the Event Viewer and then view the logs. Whenever I move an event log it seems to become corrupted and I get the message…
Bill Walton
  • 143
  • 5
0
votes
2 answers

Server Hanging - Server Event Viewer

We are experiencing problems with our dedicated server, where it is hanging quite often (sometimes in the space after a few hours after a power cycle). I've looked in the Events Viewer and under SYSTEM, there are thousands of events that have been…
MSchumacher
  • 11
  • 1
  • 3
0
votes
1 answer

Lots of Logon/Logoff events in the event viewer windows 2003

I seem to be getting a lot of these entries in the Security event viewer. Around 8-12 every hour. I am wondering if a) I should be worried about it? or b) what actually is going on, Can anyone help? Type: Success Audit Source: Security Category:…
Rippo
  • 169
  • 4
  • 13
0
votes
1 answer

SharePoint Application down in Windows Server

I got a SharePoint environment consist of Web Servers, Index Server and Database Server. The SharePoint application has been down for unknown reason, after I check on the event viewer and the result as below: Event ID : 1013 Computer : Web…
sams5817
  • 167
  • 6
0
votes
1 answer

SS 2005 SP4 install giving vsJitDebugger events

Windows Server 2003, SQL Server 2005 (9.00.3080) I installed SS2005 SP4 without a problem and immediately started getting vsJitDebugger 'unhandled win32 exception' messages in the application log every couple of minutes. I changed the DEP to only…
user49352
  • 123
  • 2
  • 4
  • 12
0
votes
1 answer

My user name has 1000's of events in Event Viewer

Recently a user asked me if I would look into the VPN connection because they were being booted off constantly. I went to Event Viewer to see the logon/logoff events from last night. Out of the 47k security events from the last few days, I had 44k…
gtaylor85
  • 199
  • 2
  • 3
  • 14
0
votes
1 answer

Why does the Windows Event Viewer sometimes show a human-readable user name, and sometimes an SID?

On some of our systems, Event Viewer shows a human-readable user name for the Event Log entries. On other systems, Event Viewer shows an SID (in the form S-1-5-...). Luckily, the SysInternals utility PSGETSID can be used to translate one to the…
Patrick
  • 217
  • 3
  • 8
0
votes
1 answer

Is it possible to connect WinServer eventlog from other domain

I have a virtual machine with Windows Server R2 Ent. In this machine runned domain controler test.local. I have admin(doamin and local) account on this machine. I want to get access to event log of this machine from my dev machine which is on my…
Stoune
  • 101
0
votes
1 answer

aggregate local events in AD

How can I aggregate events from event viewer log (logins with local Administrator) from all computers (atleast the servers - 2003,2008,2008r2) in an AD domain?
user60557
0
votes
2 answers

Exchange 2010: Replication Service Still Trying to Replicate Deleted Mailbox Store

In advance, thank you for your opinions! I just migrated from Server/Exchange 2003 to Server 2008 SR2 running Exchange 2010. I had an extra mailbox that appeared with some system mailboxes in it. I used the EMS to move those mailboxes over and then…
ThaKidd KG5ORD
  • 329
  • 1
  • 7
  • 17
0
votes
1 answer

Event ID 3009 on SBS 2003 R2

Getting the following error on my SBS 2003 R2 Server: Server ActiveSync: Unexpected Exchange mailbox Server error: Server: [celeritympp.mpp1.local] User: [jwhalen@mpp1.com] HTTP status code: [409]. Verify that the Exchange mailbox Server is working…
Igor
  • 78
  • 1
  • 6
0
votes
0 answers

Windows Server 2012 "User Logoff Notification for Customer Experience Improvement Program" events causing problems with backups

On this Windows Server 2012 server every time a backup fails, there is an event in event viewer (Windows Logs > System) at the very same second the backup file stops been written to. "User Logoff Notification for Customer Experience Improvement…
Paul
  • 113
  • 2
0
votes
1 answer

I am continuously getting Audit Failure on the computer. Does that mean someone is trying to brute force to the computer?

I am getting lots of Audit Failure errors on Windows Logs/Security in event viewer. See the image below. Does that mean someone is trying to brute-force to my computer?
Mohammad Taherian
  • 103
  • 2
0
votes
0 answers

What can I do about a BvSshServer error that's linked to a disconnected server?

Here are the Specs of our current server: Poweredge R540, Windows Server 2019 (version 1809) We swapped this current server in for an older Poweredge R530 running Server 2012, but we've been receiving a deluge of errors linked to the old server, for…
mike_0922
  • 1
0
votes
0 answers

A member was added/removed to a security-enabled local group SharePoint search server

Hello all This action happened every time at 06:00 AM on SharePoint Search Server and I dont know why this event happened by SP.Farm domain user (Administrator user on the server). Anyone can tell me why this action happened on the system? Event…
Muhanad Muneer
  • 109
  • 2
1 2 3
…
13 14