How to enable event viewer in Windows

How to enable event viewer in Windows

The Windows operating system constantly monitors the various noteworthy events that occur in your system. In Microsoft Windows event (event) is any incident in the operating system that is written to the log or requires notification of users or administrators. This can be a service that doesn’t want to run the installation of the device or an error in the application. Events are logged and stored in the Windows event logs and provide important chronological information that helps to monitor the system to maintain its safety, to troubleshoot and to perform diagnostics.

Launch event viewer

In order to run the Windows event viewer, type that same phrase into the search or go to “control Panel” — “administrative tools” — “event Viewer” Events are divided into different categories. For example, the application log contains messages of installed programs and the Windows log — system events operating system.

You are guaranteed to find errors and warnings in the event viewer, even if Your computer, everything is in order. The Windows event viewer is designed to help system administrators to monitor the status of computers and find out the causes of errors. If Your computers are no visible problems, it is likely that the displayed errors are not important. For example, you can often see mistakes about the failure of certain programs that occurred weeks ago in a single run.

System alerts also are usually not important to the average user. If You solve the problem related to the server configuration, they can be useful, otherwise probably not.

In the operating system, Windows 10, 7, as well as in Windosw Vista, there are two categories of event logs: Windows logs and logs applications and services. Windows Logs – used by the operating system to log system-wide events related to applications, system components, safety and run. And logs applications and services – used by applications and services to record events associated with their work. To manage event logs you can use the snap-in “Event viewer” or the command-line wevtutilof which will be discussed in the second part of the article. All log types are described below:

App – keeps important events associated with a specific application. For example, Exchange Server stores the events related to the forwarding of mail, including events information store, mailboxes, and running services. The default is placed in the %SystemRoot%System32WinevtLogsApplication.Evtx.

Security – stores events related to security, such as logon/logoff, privilege usage and access to resources. The default is placed in the %SystemRoot%System32WinevtLogsSecurity.Evtx

Installation – this log records events that occur when you install and configure the operating system and its components. The default is located in %SystemRoot%System32WinevtLogsSetup.Evtx.

System – stores the events of the operating system or its components, such as the failure of the launches of services or drivers are initialized, system-wide messages and other messages related to the system as a whole. The default is placed in the %SystemRoot%System32WinevtLogsSystem.Evtx

Forwarded events – if you have configured event forwarding, this log get events forwarded from other servers. The default is placed in the %SystemRoot%System32WinevtLogsForwardedEvents.Evtx

Internet Explorer – this log records events that occur when configuring and working with Internet Explorer. The default is placed in the %SystemRoot%System32WinevtLogsInternet Explorer.Evtx

Windows PowerShell – this log records events associated with the use of PowerShell. The default is located in %SystemRoot%System32WinevtLogsWindowsPowerShwll.Evtx

Event equipment – if you have configured logging equipment, this log records events generated by the devices. The default is placed in the %SystemRoot%System32WinevtLogsHardwareEvent.Evtx

In Windows 10 the infrastructure that underlies event logging based as well as Windows Vista, in XML. Information about each event conforms to an XML schema that allows you to access the XML code of any event. In addition, you can create an XML-based queries to retrieve log data. To use these new features does not require knowledge of XML. Snap “Event viewer” provides a simple GUI to access these opportunities.

There are other uses of the event viewer. For example, Windows records the time of full load the operating system. Or, if your computer is a server, You can enable event recording shut down and restart — whenever someone would turn off the PC, he will need to enter a reason for this, and you can see all of the shut down and restart and put the cause of the event.

In addition, you can use the event viewer in conjunction with the task scheduler — right click mouse on any event and select “Bind the task to the event”. Whenever will happen this event, Windows will launch the appropriate task.

Source: and


0 0 vote
Article Rating
Notify of
Inline Feedbacks
View all comments

Do NOT follow this link or you will be banned from the site!
Would love your thoughts, please comment.x

Spelling error report

The following text will be sent to our editors: