1 / 4

How to check Reboot and Shutdown logs in Windows server

Find out the steps to check reboot and shutdown logs on the Windows server with the help of an event viewer to ensure system stability and troubleshooting.

Joellee1
Télécharger la présentation

How to check Reboot and Shutdown logs in Windows server

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. How to check Reboot and Shutdown logs in Windows server? When using a Windows server environment, it is important to monitor system reboots & shutdowns for system administrators to ensure the stability & performance of the server. Keeping track of these events can help you diagnose issues, identify potential problems & maintain a record of system activities. In this detailed article, Know how to check reboot & shutdown logs in the Windows server. We will check the logs using Event Viewer on the Windows server. Well, What’s this Event Viewer? An Event Viewer is a powerful tool that allows administrators to check detailed information about system events in the Windows Server. Checking Reboot & Shutdown Logs in Windows Server Through Event Viewer To access the Event Viewer, you have to follow these steps: ➔ Press the Windows key + R ➔ A dialog box appears, You have to type‘eventvwr’ Once the Event Viewer opens, you can navigate to the logs related to system reboots and shutdowns. ➢ ➢ To check the Reboot Logs: ➔ Firstly, expand the ‘Windows Logs’ folder on the left panel in the Event Viewer.

  2. ➔ Once it is expanded, click ‘System’to open the System log. ➔ In the right pane, a list of events is mentioned there. You have to sort the events that you need by selecting ‘Filter the current log’ on the right side. ➔ Look for events with the Event ID ‘6005’, ‘41’ and, ‘6006’ What does this Event ID indicate? ★ ★ Event ID 6005: This indicates that the event log service was started. ★ ★ Event ID 6006: This indicates that the event log service was stopped.

  3. ★ ★ Event ID 41: This indicates that the Windows computer unexpectedly restarted without shutting down, and the related details can provide information about the potential causes of the issue. You can also search for Event ID ‘1074’This event indicates that the system is shut down or restarted by a user or an application with the reason behind the action that occurred. ➢ ➢ To check the Shutdown Logs: ➔ The beginning of the process is the same. You have to expand the ‘Windows Logs’folder in the event viewer. ➔ Click on‘System’to open the System log. ➔In the ‘filter current log’, you have to Look for events with theEvent ID ‘1074’ & Event ID ‘6008.’ As we discussed above: Event ID 1074: This indicates the reason for the system shutdown or restart, providing information about the user and the reason behind the action.

  4. Event ID 6008: This indicates the system shutdown was unexpected. It can help diagnose issues related to power failures or unexpected system failures. Conclusion For maintaining a healthy Windows server environment, Monitoring reboot and shutdown logs is important. The Event Viewer is the most convenient way to access this information, which allows system administrators to troubleshoot issues, identify patterns, and ensure the smooth operation of their servers. Reviewing these logs to keep your system proactive regularly is the best practice. Source - https://www.hostitsmart.com/manage/knowledgebase/315/How-to- check-Reboot-and-Shutdown-logs-in-Windows-server.html

More Related