Windows 10: Read Logoff and Sign Out Logs in Event Viewer in Windows

How to: Read Logoff and Sign Out Logs in Event Viewer in Windows

How to Read Logoff and Sign Out Logs in Event Viewer in Windows


When a user log in (sign in) without needing to restart the PC.

You can use user initiated logoff (sign out).

This tutorial will show you how to view the date, time, and user details of all user initiated logoff and sign out event logs in Windows 7, Windows 8, and Windows 10.



Here's How:

1. Press the Win+R keys to open Run, type eventvwr.msc into Run, and click/tap on OK to open Event Viewer.

2. In the left pane of Event Viewer, open Windows Logs and System, right click or press and hold on System, and click/tap on Filter Current Log. (see screenshot below)

*note If you have already filtered this log, click/tap on Clear Filter first and then click/tap on Filter Current Log to start over fresh.



3. Enter the 4647 event ID into the <All Event IDs> field, and click/tap on OK. (see screenshot below)



4. You can now view the details of user initiated logoff event logs. (see screenshot below)



5. When finished viewing log details, you can close Event Viewer if you like.


That's it,
Shawn


Related Tutorials

• How to Clear All Event Logs in Event Viewer in Windows
• How to Read Shutdown and Restart Event Logs in Windows
• How to Sign out of Windows 10
• How to Play Sound at Logoff (Sign-out) in Windows 10
• How to Add or Remove Sign out Option in Windows 10

:)

 

How can I get the latest shut downs/starts/logins/log-outs in Windows?

Hello Antonio, *Smile

I hope this may help with the shut down and restart logs.

*Arrow Read Shutdown Logs in Event Viewer in Windows | Windows 10 Tutorials

For logoff and sign out logs:

*Arrow How to Read Logoff and Sign Out Logs in Event Viewer in Windows

Here is some more info for logon event ID's that may help:

Audit Logon (Windows 10) | Microsoft Docs

Audit Other Logon/Logoff Events (Windows 10) | Microsoft Docs

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

Read Chkdsk Log in Event Viewer in Windows 10


If I use this path it doesn't work:




If I use this path then it works fine:

 

Memory Diagnostics log(s) "Missing" in Event Viewer

Completed Memory Diagnostics (twice) but can find no (0) sign of any such log in Event
Viewer (RH pane)

Anyone know how to locate Diagnostics log?

Event Viewer lists "Windows Memory Diagnostic scheduled the testing of the computer's memory to run immediately" but
not the actual Diagnostics run(s)/logs.

Acer Aspire R5 571T 57Z0, Win 10 Home

 

Clear All Event Logs in Event Viewer in Windows  


FWIW CCleaner will clear the Event Viewer Logs - just check the box under Windows>Advanced>Windows Events Logs. run CCleaner and it's that simple. Much faster than most ,bat files I've tried. Just a suggestion.