How to Launch It
Control Panel Way
- Open “Administrative Tools” applet from the traditional Control Panel.
- Launch “Event Viewer” from the list of administrative tools.
- Invoke Run window or Search Charm. Select the Settings tab in case of Search Charm.
- Type in the command “eventvwr.msc”, and hit Enter.
Display StructureThe Event Viewer is visually divided into 3 panes.
- The leftmost tree pane lists everything that the event viewer has to offer, in a tree structure.
- The middle pane describes the selected item in the tree pane.
- The rightmost Actions pane acts as a context menu, listing all the options related to the currently selected item.
Event TypesWindows and applications tend to log a lot of events, which can be categorized into 5 types.
- Information – This type of event is something accomplished by Windows or an application, like starting or ending an operation, etc. As the name implies, these events are there just to provide useful information.
- Warning – This type says that the event didn’t cause any harm as of now, but may do so in future; so you might want to take care of it.
- Error – When the event creator program loses some data of functionality that it is not supposed to, then it will log that information as an error event. This type is the most useful while debugging some system issue.
- Success Audit – Windows performs an audit on some system activities. For example, it checks if a logon was successful. If an activity was completed successfully, then an event is logged as Success Audit.
- Failure Audit – If an activity audit fails, then an event is logged as Failure Audit.
Log CategoriesThe tree pane classifies the events into several categories. Let’s go through some of them.
Windows LogsThis category contains events related to Windows components. It is further divided into following sub-categories.
- Application – This log stores events caused by applications and services. Naturally, the list is exhaustive. Three types of events are stored in this log – Information, Warning and Error.
- Security – This log stores the events of the audits that are performed by Windows; audits like checking if the log on or log off operation completed successfully, if system time was changed, if Windows started or shut down properly, etc. The result of an audit is stored as success or failure.
- Setup – The events related to some installation or uninstallation, software update, Windows update, etc., goes here.
- System – Events generated by Windows itself and the device drivers. They are classified as information, warning or error.
- Forwarded Events – If some other network computer logs events in your system, then they are listed here.
Applications and Services LogsThe hardware components and several applications have their own dedicated event log. These logs are stored under this category. Some of them are –
- Hardware Events – Any hardware interruption, failure, etc., are logged here.
- Internet Explorer – You can find events related to the built-in browser Internet Explorer here.
- Key Management Services – Certain important services log their events here.
- Microsoft – This is rather a folder parenting logs pertaining to the Microsoft software. Mostly, you will find Windows log under it, further branching out into several logs.
- Microsoft Office Alerts – Any events generated by Microsoft Office suite – Word, PowerPoint, Excel, OneNote, etc., – go here.
- Windows PowerShell – The latest and really very powerful command-line utility of Windows stores its events in this log.