|
Event Viewer is a component of Microsoft's Windows NT line of operating systems that lets administrators and users view the event logs on a local or remote machine. With Windows Vista, the event system was overhauled and renamed to Windows Event Log.[1] Image File history File links Windows_XP_Event_Viewer. ...
Image File history File links Windows_XP_Event_Viewer. ...
Windows XP is a line of operating systems developed by Microsoft for use on general-purpose computer systems, including home and business desktops, notebook computers, and media centers. ...
Image File history File links Download high-resolution version (934x670, 36 KB) Screenshot of Event Viewer as it appears in Windows Vista December CTP 5270. ...
Image File history File links Download high-resolution version (934x670, 36 KB) Screenshot of Event Viewer as it appears in Windows Vista December CTP 5270. ...
Windows Vista is a line of graphical operating systems used on personal computers, including home and business desktops, notebook computers, Tablet PCs, and media centers. ...
Microsoft Corporation, (NASDAQ: MSFT, HKSE: 4338) is a multinational computer technology corporation with global annual revenue of US$44. ...
Windows NT (New Technology) is a family of operating systems produced by Microsoft, the first version of which was released in July 1993. ...
This article or section does not cite any references or sources. ...
Windows Vista is a line of graphical operating systems used on personal computers, including home and business desktops, notebook computers, Tablet PCs, and media centers. ...
Overview
Event logs have been a feature of Windows NT since its original release in 1993. Applications and operating system components can make use of this centralized log service to report events that have taken place, such as a failure to start a component or complete an action. The system defines three log sources, "System", "Application", and "Security". The System and Application log sources are intended for use by the Windows operating system and Windows applications respectively; the Security log source, however, is only directly writable by the Local Security Authority Subsystem Service (lsass.exe). Year 1993 (MCMXCIII) was a common year starting on Friday (link will display full 1993 Gregorian calendar). ...
A security log is used to track security-related information on a system. ...
Local Security Authority Subsystem Service (LSASS), is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system. ...
Windows NT 4.0 added support for defining "event sources" (i.e. the application which created the event) and performing backups of logs. Windows NT 4. ...
Windows 2000 added the capability for applications to create their own log sources in addition to the three system-defined "System", "Application", and "Security" log files. NT4's Event Viewer was also replaced with a Microsoft Management Console snap-in. Windows 2000 (also referred to as Win2K) is a preemptive, interruptible, graphical and business-oriented operating system designed to work with either uniprocessor or symmetric multi-processor computers. ...
MMC on Windows Server 2003, running Computer Management snap-in The Microsoft Management Console (MMC) is a component of modern Microsoft Windows operating systems that provides system administrators and advanced users with a flexible interface through which they may configure and monitor the system. ...
Windows Server 2003 added the AuthzInstallSecurityEventSource() API calls so that applications could register with the security event logs, and write security audit entries.[2] Windows Server 2003 is a server operating system produced by Microsoft. ...
Windows Event Log Windows Event Log is the rewritten event tracing and logging architecture introduced with Windows Vista. [1] Windows Event Log has been rewritten around a well-defined structured XML format to allow applications to more precisely log events. There are a large number of different types of event logs including Administrative, Operational, Analytic, and Debug log types. Selecting the Application Logs node in the Scope pane reveals numerous new subcategorized event logs, including many labeled as diagnostic logs. Event logs can be configured to be automatically forwarded to other systems, running Windows Vista or Windows Server 2008. Event logs can also be remotely viewed from other computers or multiple event logs can be centrally logged and managed from a single computer. Event logs can be filtered by one or more criteria or a standard XPath expression, and custom views can be created for one or more events. Such categorizing and advanced filtering allows viewing logs related only to a certain subsystem or an issue with only a certain component and sending traces on the fly to support technicians. Events can also be directly associated with tasks, which run in the redesigned Task Scheduler. Event attributes are also much more detailed and show EventID, Level, Task, Opcode, and Keywords properties. In software engineering, tracing is a specialized use of logging to record information about about a programs execution. ...
The Extensible Markup Language (XML) is a general-purpose markup language. ...
Windows Vista is a line of graphical operating systems used on personal computers, including home and business desktops, notebook computers, Tablet PCs, and media centers. ...
Windows Server 2008 is the name of the next server operating system from Microsoft. ...
XPath (XML Path Language) is an expression language for addressing portions of an XML document, or for computing values (strings, numbers, or boolean values) based on the content of an XML document. ...
This article is about the scheduled tasks component in Windows. ...
See also The following is a list of Microsoft Windows components. ...
MMC on Windows Server 2003, running Computer Management snap-in The Microsoft Management Console (MMC) is a component of modern Microsoft Windows operating systems that provides system administrators and advanced users with a flexible interface through which they may configure and monitor the system. ...
References - ^ a b New tools for Event Management in Windows Vista
- ^ AuthzInstallSecurityEventSource Function. Retrieved on 2007-10-05.
Year 2007 (MMVII) is the current year, a common year starting on Monday of the Gregorian calendar and the AD/CE era in the 21st century. ...
For other uses, see 5th October (Serbia). ...
External links - Event Log Wiki — Contains useful developer and administrator resources for event log management.
- Event Logging — Developer documentation for event logging (NT 3.1 through XP)
- Windows Event Log — Developer documentation for the new event log system in Windows Vista
- A database of Windows event log entries — Contains several thousands Windows event log entries along with troubleshooting suggestions for each of them
| Windows components | | Core | Aero · ClearType · Desktop Window Manager · DirectX · Windows Explorer · Taskbar · Start menu · Windows Shell (Shell namespace · Special Folders · File associations) · Windows Search (Saved search, iFilters) · Graphics Device Interface · Windows Imaging Format · Next Generation TCP/IP stack · .NET Framework · Audio · Printing (XML Paper Specification) · Windows Script Host (VBScript, JScript) · COM (OLE, OLE Automation, DCOM, ActiveX, Structured storage) | | Applications and tools | Backup and Restore Center · Calculator · Calendar · Character Map · Cmd.exe · Contacts · Control Panel (Applets) · Device Manager · Disk Cleanup · Disk Defragmenter · DVD Maker · Event Viewer · Fax and Scan · Internet Explorer · Mail · Magnifier · Management Console · Media Center · Meeting Space · Mobile Device Center · Mobility Center · Movie Maker · Narrator · Notepad · Paint · Photo Gallery · PowerShell · Private Character Editor · Problem Reports and Solutions · Remote Assistance · Sidebar · Snipping Tool · Sound Recorder · Sysprep · System Configuration · System File Checker · System Restore · Unix subsystem · Windows Installer · Windows Media Player · Windows Speech Recognition · Task Manager · Windows Update · WordPad · WinSAT | | Kernel | Ntoskrnl.exe · hal.dll · System idle process · Svchost.exe · Registry · Windows service · Service Control Manager · WOW/WOW64 · DLL · EXE · NTLDR/Boot Manager · Winlogon · Recovery Console · I/O · WinRE · WinPE · Kernel Patch Protection | | Services | AutoPlay · BITS · Task Scheduler · Wireless Zero Configuration · Shadow Copy · Windows Error Reporting · Multimedia Class Scheduler · CLFS | | File systems | NTFS (Junction point, Mount Point, Reparse point, Symbolic link, TxF, EFS) · FAT32 · FAT16 · FAT12 · exFAT · CDFS · UDF · DFS · IFS | | Server | Domains · Active Directory · DNS · Group Policy · Roaming user profiles · Distributed Transaction Coordinator · SharePoint Services · Windows Media Services · Rights Management Services · IIS · Terminal Services · WSUS · Network Access Protection · DFS Replication | | Architecture | NT series architecture · Object Manager · Startup process (Vista) · I/O RP · Kernel Transaction Manager · Logical Disk Manager · Security Accounts Manager · Windows Resource Protection · LSASS · CSRSS · SMSS | | Security | UAC · BitLocker · Defender · DEP · Protected Media Path · Mandatory Integrity Control · UIPI · Windows Firewall · Security Center | | Games | Chess Titans · FreeCell · Hearts · Hold 'Em · InkBall · Mahjong Titans · Minesweeper · Purble Place · Solitaire · Spider Solitaire | | PowerToys | Tweak UI · SyncToy · PowerCalc | |