Windows 10: Event Log mechanism

Hi All

I struggle to find some information about logs collecting mechanism in Windows 10. Unfortunately, I haven't managed to do it yet. I am not able to find any publication or www site with specific information about it. Does anyone of You know where can I find needed data? It is really urgent for me.
Thanks in advance for help.

:)

 

Event log

Ok...we can still take a stab at this!

Let me see what other methods are out there to track this down.

When did it happen, do you remember?

- C

 

Event logs

I am getting 30-40 of these error messages, whenever I am opening my laptop it starts freezing up and constantly freezes.

Log Name: System

Source: Microsoft-Windows-DistributedCOM

Date: 12/25/2016 3:00:41 AM

Event ID: 10016

Task Category: None

Level: Error

Keywords: Classic

User: LOCAL SERVICE

Computer: satyam

Description:

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{D63B10C5-BB46-4990-A94F-E40B9D520160}

and APPID

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

<System>

<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />

<EventID Qualifiers="0">10016</EventID>

<Version>0</Version>

<Level>2</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x8080000000000000</Keywords>

<TimeCreated SystemTime="2016-12-24T21:30:41.609706800Z" />

<EventRecordID>3834</EventRecordID>

<Correlation />

<Execution ProcessID="920" ThreadID="2796" />

<Channel>System</Channel>

<Computer>satyam</Computer>

<Security UserID="S-1-5-19" />

</System>

<EventData>

<Data Name="param1">application-specific</Data>

<Data Name="param2">Local</Data>

<Data Name="param3">Activation</Data>

<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>

<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>

<Data Name="param6">NT AUTHORITY</Data>

<Data Name="param7">LOCAL SERVICE</Data>

<Data Name="param8">S-1-5-19</Data>

<Data Name="param9">LocalHost (Using LRPC)</Data>

<Data Name="param10">Unavailable</Data>

<Data Name="param11">Unavailable</Data>

</EventData>

</Event>

Any help will be heartly appreciated.

Thanks.

 

Not sure, what exactly you are looking for, but technet is great source of informations. Like:

Event Logs

Configuring and Starting an AutoLogger Session (Windows)

 

Thanks, you're right. I have to look through the technet to find some more info.
Btw, data I need is the specific and technical description of way of collecting logs in Windows 10 (so called Loging).