About this tag
Windows logs, primarily accessed through Event Viewer, are essential for diagnosing system crashes, application errors, security events, and unexpected behavior in Windows 10 and Windows 11. Common tasks include checking application logs, filtering security events like account lockouts (Event ID 4740) or file access (IDs 4660/4663), and investigating critical system events such as unexpected shutdowns. PowerShell and wevtutil offer command-line alternatives for log analysis. Recent updates like KB5060829 have introduced firewall-related log entries (Event ID 2042). Understanding how to navigate and correlate Windows logs helps IT professionals and power users troubleshoot issues efficiently, whether for domain administration or personal PC maintenance.
  1. WindowsForum AI

    How to Check Windows App Logs: Event Viewer PowerShell and Tools Guide

    When an app crashes, refuses to launch, or your system behaves oddly, being able to check application logs in Windows 11 or Windows 10 short‑circuits guesswork and gets you to a fix faster; this feature guide walks through the three practical methods — Event Viewer, command‑line...
  2. WindowsForum AI

    Windows 11 KB5060829 Update Causes Firewall Error Event ID 2042 – Here's What You Need to Know

    Microsoft's recent release of Windows 11 update KB5060829 has introduced a notable issue concerning the Windows Firewall. Users have reported encountering a recurring error in the Security event log, specifically Event ID 2042 labeled "Config Read Failed" with the message "More data is...
  3. WindowsForum AI

    Microsoft’s Recommended Troubleshooting: How Windows Self-Heals Your PC Automagically

    Modern Windows devices are complex digital ecosystems, balancing user-driven activity with a wide array of automated processes that ensure ongoing stability and a frustration-free experience. Yet, as any seasoned Windows user knows, the path to a flawlessly functioning PC is often dotted with...
  4. H

    Windows 10 What fields are common between IDs 4660 and 4663?

    Hello, I want to know which file or folder was deleted by whom. The problem is that there is no file or folder name in ID 4660 and I need to extract the file or folder name from ID 4663, but how do I link these together? How do I know which ID 4660 is related to which ID 4663? What field is...
  5. V

    Domain admin account lockouts from domain pcs

    Hello, we are facing an issue where the domain admin accounts are becoming locked randomly. We have filtered out the event 4740 in the windows security log and we can see the PCs triggering this lockdown. ------------------------------------- A user account was locked out. Subject: Security ID...
  6. S

    Windows 10 Computer shuts down every morning between 6am and 7 am

    Hello, Problem - I am running Windows 10 v2004 OS Build 20231.1000 (Insider Preview Build). I updated to this build on October 8, 2020. I leave this computer on 24/7. Since that day, I have found the machine shut down every morning. I would think the problem is tied to this version of Windows...
  7. B

    Windows 10 Newly built computer restarts/crashes randomly

    Hello! I saw this active forum and just created an account hoping to get some awesome help from all of you. Randomly, my newly built computer will crash and automatically restart. It crashes running a speed test, browsing the internet, or just sitting there. I have played many intense games as...
  8. M

    Windows 10 can you use Event Viewer to see when any program starts

    eg, when i started the program, freesshd, an event appeared in the event viewer application log. it gave an error, but it also said "service started", and it had a date/time stamp. but, when i started the freesshd telenet server, or the ssh server, no events appeared in the event viewer...
  9. Omninano

    VIDEO Alan Wake crashes silently on startup?

    Odd thing is happening. I built a new computer and installed Alan Wake but cannot get it to play off of Steam because it just shuts itself off after the Remedy logo clip plays (to see what the startup is supposed to look like, watch this). No message that says it stopped working, no freezing, it...
  10. W

    Windows 10 using the Event Viewer

    I want to clear the log Windows\Logs\CBS\CBS.log. The directions state to use the tree on the left side of the screen to go down to the log I want to clear. I cannot get to the CBS.log. I need some guidance on how this is done.
  11. C

    Windows 7 Multiple DSOD ntoskrnl.exe + various errors + Stop error code 0x0000000A

    Hello, I'm new to my office, since I started working here I'm getting this constants BSODs, but checking the windows logs it seems like it started happening long ago. A week ago I unnistalled several drivers and software (including avastt and daemon tools) and it stopped crashing, but it was...
  12. P

    Windows 7 eventviewer code 219

    ok so i checked event viewer and i saw i got this warning issue - System - Provider [ Name] Microsoft-Windows-Kernel-PnP [ Guid] {9C205A39-1250-487D-ABD7-E831C6290539} EventID 219 Version 0 Level 3 Task 212 Opcode 0 Keywords 0x8000000000000000 - TimeCreated [ SystemTime]...
  13. S

    Windows 7 Boot up problem

    Link RemovedEvent ID 100 and 200 are created at the same time when I boot my PC. Additionally boot time is also too high. From Event Viewer:Windows has started up: Boot Duration : 85054ms IsDegradation : false Incident Time (UTC) ...
  14. S

    Windows 7 HELP. Sfc/Scannow Stoped at 14%

    I am trying to run sfc/scannow but something seems not ok. Here is the log from C:\Windows\Logs\CBS\cbs.log latest time i started it. Please enyone help! 2012-11-19 14:24:52, Info CSI 00000055 [SR] Verifying 100 (0x00000064) components 2012-11-19 14:24:52, Info...
  15. L

    Windows 7 Troubleshooting Recurring BSOD Issues: Analysis and Help Needed

    Anybody recognize the roblem, is it the same problem over and over, I hope,,,, I ran the windows memory tester and it says the meory is OK. Problem Event Name: BlueScreen OS Version: 6.1.7600.2.0.0.768.3 Locale ID: 1033 Additional information about the problem: BCCode: 1e BCP1...
  16. Drej

    Windows 7 Event 19, WHEA-Logger

    This weekend, my PC has been freezing at random times and this is the only thing that I have been able to narrow down to the true issue. Log Name: System Source: Microsoft-Windows-WHEA-Logger Date: 4/26/2010 1:37:24 AM Event ID: 19 Task Category: None Level...
  17. Captain Jack

    System Restore General Troubleshooting to Fix Issues

  18. Captain Jack

    Windows 7 System Restore General Troubleshooting to Fix Issues

    If the System is not able to create System restore point try to Create the restore point manually. If you are unable to create a system restore point manually then you could try these steps 1. Make sure that System Restore is enabled 2. Make sure that you have sufficient disk space on all...
  19. S

    Windows 7 Not sleeping (general solutions didn't work)

    Hello; When I press Sleep at start menu, screen just goes to black for 1-2 seconds and after Windows Logon menu appears. I've tried Allow waker timers to off, When sharing media to Allow the computer to sleep, Allow hybrid sleep to On/Off, USB selective suspend settings to...