Event viewer

Not sure if this is the proper place to post this, but:

I'm planning on giving instructions on how to look at event logs on trouble shooting. I've been noticing, on certain threads how this is always overlooked. It is a rare occurrence where one uses the event log to fix things.

Or should I not do this? :confused

 

You should! I myself overlook it often.

 

I overlook it because I usually have quicker and more effective methods than digging through 665567657345234 log entries

 

Heh, typically, I clear the logs, reboot and check the logs.

Quicker and more effective ways is beneficial. Thoughts?

There is a thing where you can filter the logs, which I'll post in my thread, when I create it.

 

I guess it depends on the problem. I deal with a lot of random issues when I fix something for someone, so clearing the logs would probably hurt more than help.

It will be good to have the thread.

 

Well, past issue. Clearing the logs and rebooting could help with finding current issues, yes?

 

A service doesn't start, noted in event viewer. An app can't be installed, noted. etc.

Anyway, I'll eventually do one for XP and windows 7. I can do one for vista and windows 8, but they are not used as much. But xp is different, vista (7,8) are nearly the same.

 

Yes.

 

In your thread, I would consider instructions on exporting and uploading logs.

 

Agreed, the native .evtx files make filtering easy.

 

Thanks.

I don't want to make this a exhaustive fix for all, just a heh, look at this, to fix your issues. I'll try posting something and if it not worth a thread, than you or someone else will go for it. I'll have to first install my drive, get workstation up and running, and get xp, vista, 7, and 8 vm's running.

 

Yeah, sometimes clearing the Event Log and rebooting, then viewing again will help.

As n this page for Server 2012, et-al:-

http://technet.microsoft.com/en-us/library/cc722318.aspx

 

Yes, I run mmc commands a lot working on computers at work. Thought, I do it mostly from command line. And some powershell. But, I don't wish to go that in depth, since powershell is awesome. But, I don't want to go crazy here. heh.

Personally, I'm a command line nut.

This project won't get done soon, but it will get done.

 

I find this tool useful as an event viewer: http://www.majorgeeks.com/MyEventViewer_d8074.html

 

I'll at it to my list, Maxwell. This may be longer than expected. There are quite a few tools to work with event viewer. I will do the free ones.

This weekend was shot, since I upgraded our vdi environment to deep security 9. 5 hour process. fun fun!