Windows 10: Read Shutdown Logs in Event Viewer in Windows

How to: Read Shutdown Logs in Event Viewer in Windows

How to Read Shutdown and Restart Event Logs in Windows


You can use restart.

The event ID's below will show you these details.

[table][tr][td]Event ID[/td] [td]Description[/td] [/tr] [tr][td]1074[/td] [td]Logged when an app (ex: Windows Update) causes the system to restart, or when a user initiates a restart or shutdown.[/td] [/tr] [tr][td]6006[/td] [td]Logged as a clean shutdown. It gives the message "The Event log service was stopped".[/td] [/tr] [tr][td]6008[/td] [td]Logged as a dirty shutdown. It gives the message "The previous system shutdown at time on date was unexpected".[/td] [/tr] [/table]

This tutorial will show you how to view the date, time, and user details of all shutdown and restart event logs in Windows 7, Windows 8, and Windows 10.



Here's How:

1 Press the Win+R keys to open Run, type eventvwr.msc into Run, and click/tap on OK to open Event Viewer.

2 In the left pane of Event Viewer, open Windows Logs and System, right click or press and hold on System, and click/tap on Filter Current Log. (see screenshot below)

If you have already filtered this log, click/tap on Clear Filter first and then click/tap on Filter Current Log to start over fresh.




3 Enter the event ID's below into the <All Event IDs> field, and click/tap on OK. (see screenshot below)
1074, 6006, 6008




4 You can now view the details of these shutdown event logs filtered by these event IDs. (see screenshots below)












5 When finished viewing log details, you can close Event Viewer if you like.


That's it,
Shawn


Related Tutorials

• How to Clear All Event Logs in Event Viewer in Windows
• How to Read Logoff and Sign Out Logs in Event Viewer in Windows
• How to Enable or Disable Shutdown Event Tracker in Windows 10
• How to Restart the Computer in Windows 10
• How to Shut Down the Computer in Windows 10
• How to Play Sound at Shutdown in Windows 10
• How to Allow or Prevent Users and Groups to Shut down System in Windows 10

:)

 

How to check log about when computer shutdown, sleep and restart ?

Hi, try
Read Shutdown Logs in Event Viewer in Windows
and the related tutorials listed following the text.

More: Google search (e.g) for
sleep event id
shut down event id
etc

 

Error in Event Viewer

Hi,



Thank you for writing to Microsoft Community Forums.



As you have mentioned, you have performed a repair installation on the computer and you see Event 508, 510 and 533 in Event Viewer.



I would like to inform that if you see any critical error in Event Viewer, please share the event logs with us to help you with the appropriate troubleshooting steps. Please follow the steps mentioned below to share the event logs:

1. Press Windows + X from the keyboard, select
   Event Viewer.
   
2. Expand Windows Logs from the left pane and select
   Applications.
   
3. Click Filter Current Log from extreme right pane. Then in the new windows check the box beside
   Error and click OK.
   
4. Now, look for a critical Error in the list and note down the message/information from the
   General Tab in the lower section.
   

Please reply with the status of the issue, we will be glad to help you further.



Regards,

Nikhar Khare

Microsoft Community - Moderator

 

Read Chkdsk Log in Event Viewer in Windows 10


If I use this path it doesn't work:




If I use this path then it works fine:

 

Clear All Event Logs in Event Viewer in Windows  


FWIW CCleaner will clear the Event Viewer Logs - just check the box under Windows>Advanced>Windows Events Logs. run CCleaner and it's that simple. Much faster than most ,bat files I've tried. Just a suggestion.

 

Read Chkdsk Log in Event Viewer in Windows 10

Piping from Admin to current user use: $home\Desktop\....

Shawn, you missed the switch in match (-match)