Questions tagged [windows-event-log]

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

"Event log" usually refers to the system/server logs on Microsoft Windows machines.

617 questions
3
votes
3 answers

How to troubleshoot events in the Windows Event Logs?

How do you troubleshoot events that are not clear when you read them? Is there a website to search for those Event IDs and errors? In the following example event it is clear that the gateway resolution fails for the network location awareness…
Tamara Wijsman
  • 388
  • 2
  • 4
  • 16
3
votes
2 answers

Listing Users using RDP

Windows Server 2008 R2 I'm trying to use PowerShell to get me a list of users who have logged into Remote Desktop Services (formerly known as Terminal Services) during the past day. With little understanding and much copy and pasting, I have this…
Chris_K
  • 3,444
  • 6
  • 43
  • 45
3
votes
2 answers

New set up DHCP Server on Server 2008 R2 won't work, Event-ID 1046

I just set up a 2008 R2 as DC, and DNS. Both worked fine, DNS works fine forward and reverse lookup. Now I wanted to install DHCP. As soon as the installation of the role is finished, I get this Event-ID Error 1046: Link When I first set it up there…
3
votes
2 answers

Novell Netware 6.5 Server Logs

I have inherited a Novell Netware 6.5 server to manage. We had have some users move folders into other folders that they were not supposed to be able to do. Additionally, there have been cases were it would be nice to view a log of when a user last…
John
  • 2,276
  • 7
  • 44
  • 60
3
votes
3 answers

Best way to do DHCPD event logging?

I'm thinking about building an (experimental) system that depends on realtime information from a 'standard' ISC DHCP server on a Linux box. I want to log (and process) events that are related to PXE clients trying to get address and boot…
Niels Basjes
  • 2,196
  • 3
  • 19
  • 26
3
votes
3 answers

Event Logging for RAID fault in 2008 R2

does anyone have a solution for logging an error/critical entry to the event log in 2008 R2 when RAID has an issue? I really want to set up email alerts for when this happens. I'm using the MS builtin software RAID, not hardware RAID. There's a…
benpage
  • 185
  • 1
  • 9
3
votes
3 answers

Relocating event logs in Windows Server 2008 R2

How can I relocate the Application, Security, and System event logs in Windows Server 2008 R2? The KB for 2003 does not work, neither does going into the properties of each log and changing the path. By all accounts it should work, but it simply…
user65237
3
votes
2 answers

How can one learn to read the Windows Server event viewer and know what events are normal and which are signs of potential problems?

I have been managing Windows Server 2003 machines at work, but I am a software developer. (Please don't say 'hire a sysadmin', the point of this question is my own learning). How do server admins learn what to look for in event viewer? Sometimes…
MetaGuru
  • 896
  • 6
  • 22
  • 36
3
votes
2 answers

How can I create an event trace with logman.exe on W2K8?

For various reasons, I'd like to get a trace of disk accesses on some Windows Server 2008 machines. I can set up a user defined data collector set in the Reliability and Performance Monitor tool to create an event trace using the "Windows Kernel…
3
votes
5 answers

What is the best tool for to capturing Windows Event Logs centrally?

We have a collection of about 100 Windows 2003 and Windows 2008 R2 domain controllers that I would like to start capturing Event Log data from. Many of the servers are very busy and generate large volumes of events, particularly security events that…
3
votes
2 answers

Open source scripting log analysis: tools for breaking stderr log messages into groups (normal bugs vs abnormal) or looking at trends (we're getting less of this message and more of that one)

Imagine some linux systems with scripts of various kinds (mostly PERL but it could be anything that writes to STDERR) which are run 100s of times by different users with slightly different needs. Logs are kept of the output and the warnings/errors…
Paul
  • 1,634
  • 15
  • 19
3
votes
2 answers

Why are logon types on Domain Controller and Workstation different

When I logon to a specific machine in an Active Directory domain, the logon type recorded in Event Viewer is 10, but the same event log on the domain controller is 3. Why are the all of logon on the domain controller are logon type 3 while the logon…
3
votes
2 answers

How can i find the trigger of an acpi event?

My Server shutsdown . Evertime at midnight. The acpi Event power_button is triggered. at /etc/acpi/events/power_button power_button: # care about the power button event=button/power.* action=/usr/lib/acpid/power_button How can i find out the…
n00ki3
  • 227
  • 1
  • 6
3
votes
1 answer

Service failed to start but nothing in event log

I'm getting the warning that a service or driver failed to start, check the event log, but when I do, I can't find any error or warning events on any of the logs ? Is there some way to work out what is causing the error?
SteveC
  • 271
  • 3
  • 8
  • 21
2
votes
0 answers

Windows not collecting logs. Error: The WinRM service is not listening for WS-Management requests

I am getting this error The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate…