Windows Event Logs

What Are Windows Event Logs?

Windows event logs are unique files that record important events on your PC. For example, when a user logs into the machine or when an error occurs, it is recorded in the Windows event logs. You can read these logs with Windows Event Viewer. Event Viewer presents explicit information about important events like programs that should start, but don’t or updates that were not installed as expected on your computer.

To the average person, these Windows events might not mean much, but for more advanced users, the details of the Windows event logs can be extremely helpful when troubleshooting a variety of issues.

 

Types of Windows Event Logs

 

Application Events

Depending on the severity of the Windows event, application events can be classified as error, warning, or information. An important problem such as data loss occurring would be considered an error. When an event isn’t as severe, but may lead to a problem in the future, it is a warning. Lastly, a successful operation of a driver, program or service is considered an information event.

 

Setup Events

If your computer is setup as a domain controller, it will have other logs displayed in the setup events.

 

Security-Related Events

Also called audits, security-related Windows events can either be successful or failed. It all depends on the particular Windows event. One example would be whether or not a log on attempt by a user was successful or unsuccessful.

 

Forwarded Events

When events are sent to a Windows Event Log by other computers, these are considered forwarded events.

 

System Events

Additional logs can be viewed in setup events on computers that are configured as domain controllers.

Keeping track of Windows events across your environment can be time-consuming, but it doesn’t have to be. Event Manager for Windows makes keeping track of all of the events and jobs on your servers easy with an "Outlook-style" calendar that lets you view everything in one place. Event Manager collects Windows events from the system, the application, as well as security logs and enables you to easily correlate them with other events that have occurred during that time via the calendar view.

For example, many failed login attempts may be indicative of a brute force attack. Event Manager can alert you to this situation so that you can take appropriate action. You can also generate alerts for events that are impacting critical services and applications in your environment. You will know right away when there are issues that require your attention before they turn into larger problems.

SolarWindsEvent Calendar for Windows can help you keep track of the events occurring across your environment. 

 

Download Trial

 

Try SolarWinds SQL Sentry free for 14 days and see how much easier it is to keep track of Windows Events!

Windows Event Logs | SentryOne

“We use [SolarWinds] SQL Sentry daily to watch and troubleshoot active processes on our production and business critical servers.” - Kevin Howell

 

Try SolarWinds SQL Sentry today!

Download your free, 14-day trial to see for yourself how SQL Sentry can help you achieve optimal database performance.

Download Trial