Use the Windows Event Viewer to troubleshoot problems by following the steps: 1. Open the "System" or "Applications" under "Windows Log" to filter the "Error" or "Serious" level to quickly locate the problem; 2. View the event ID and source fields, and combine it with network search to obtain solutions, such as Event ID 41 represents a power problem, and 6006/6008 represents a system startup and shutdown; 3. Create a custom view to set filter conditions to save, so that it is convenient to view specific logs directly next time.

Windows Event Viewer is a very useful tool, but many people have just opened it and don't know how to actually use it. In fact, it can help you check system problems, view software errors, and even track suspicious activities.

Find what you want to check: Browse the log

Event Viewer divides information into three categories by default: system logs, security logs and application logs.
The most common view of ordinary users is the "system" and "applications" under "Windows Log". For example, if a program crashes frequently, you can first click "Application" to see if there are any red error markings.

It is recommended to filter from the "event level", such as clicking "Error" or "Serious", so that you can quickly skip a lot of irrelevant information. You can also right-click a log and select "Event Properties", which will display a more detailed description and event ID. This information is very helpful for troubleshooting problems.

Understand the event ID and source: Don't miss the key details

Each event has a corresponding event ID and "Source" field. For example:

• Event ID 41 is usually related to power problems;
• Event ID 6006/6008 indicates the start and end of the event log service, that is, the time when the system starts and closes;
• Source tells you which component or program triggered this event.

If you encounter a specific error, you can use the source of the event ID as a keyword to search, and you can often find solutions to other people's problems.

Setting up custom views: only look at what you need

If it's too troublesome to flip it manually every time, you can use the Create Custom View feature to filter specific log types or event IDs. The steps are as follows:

• Click "Create Custom View" on the left
• Select log level (such as errors, warnings)
• You can enter a specific event ID or source
• After saving the name, it will appear under "Custom View"

After doing this, you only need to click on the next time to see the records of your concern, which is especially suitable for people who often need to troubleshoot specific problems.

Basically that's it. At first, you may feel that there is too much information, but as long as you know where to find and how to screen, Event Viewer is actually quite practical.

The above is the detailed content of how to use Event Viewer. For more information, please follow other related articles on the PHP Chinese website!