Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [eventviewer]

This tag is for questions about Windows' Event Viewer. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

This tag is for questions about Windows' Event Viewer and Event Logs. Event Viewer is where Windows stores logs generated by the Operating System and certain applications.

Event Viewer has three primary logging areas:

  • Application
  • Security
  • System

Recent Versions of Windows (Vista and later / Server 2008 and later) have a large number of additional log areas.

Most Windows components (such as services) log to the System log, with notable exceptions being IIS and user-related operations (such as folder redirection at login) which log to the Application log. Programs that you write should log either to their own log areas or to the Application log. The Security log records successful and failed logins.

See also:

202 questions
-1
votes
1 answer

Move Event Log in Windows 2012

Ultimately I'm trying to have security logs written to a remote storage, \\Server-Name\Drive-Letter\File_Name.evtx For testing I'm trying to move the default log path from %SystemRoot%\System32\Winevt\Logs\Security.evtx to C:\Security.evtx . This…
selachka
  • 1
  • 1
  • 4
-1
votes
1 answer

Events Log source

I am doing a critical review of some software which gathers information about activities on a system. some of the information that is displayed to user is available in the events viewer. This is all good for when im testing the software but I need…
Kie21
  • 103
  • 1
-1
votes
2 answers

Windows Event Log SystemTime format

The follwing timestamp was created during an Windows Security Log TimeCreated [ SystemTime] 2013-10-07T07:31:09.122037600Z In this timestamp I can't understand what 122037600Z part means? Do they represent milliseconds or something? Please i…
user170899
  • 69
  • 1
  • 2
  • 6
-1
votes
2 answers

Event Viewer Task for a specific task

I can create Event Viewer Tasks to react to Event IDs, but I'm having a tough time getting the XML working to react to an event ID to a specific task. I've been testing using the filter. The task Details tab gives me:
ini
  • 101
  • 1
  • 2
-1
votes
1 answer

Monitor Eventlogs

Was just wondering how you Sysadmins monitor Windows Events logs on multiple servers. What apps are recommended and what should I be looking for? I'd imagine there must be something that can forward all logs to one console and then group and…
Jake
  • 2,268
  • 5
  • 30
  • 40
-1
votes
0 answers

Server configuration changes logs on event viewer

Our server's remote desktop settings are turned off. But no one could remember changing it. How can I find changes to server settings like this in event viewer. [Remote Desktop Setting]
Alren
  • 1
  • 1
-1
votes
1 answer

MSExchange Mid-Tier Storage Event:3019 on Exchange 2013

I am having the Event 3019 on Exchange 2013 with Source "MSExchange Mid-Tier Storage" and have not been able to find any reference on the net for this. No other failures are reported. The server is serving clients normally. Version: Exchange 2013…
user2965433
  • 190
  • 10
1 2 3
…
13
14