Windows 10: When are windows events 6006 and 6005 loggedapart from normal restart

Hi Team,I want to know in what all cases Windows events 6006 and 6005 are logged, do you have any documents stating these events?We have a program where we are using Windows events 6006 and 6005 to calculate reboot duration of a windows machine, by subtracting their time. First we check if 6006 is logged and get its next 6005 event time creation, getting the difference of these for reboot duration. But somehow, we are seeing very high durationin days returned by this program. So need to know more about these events logging.

:)

 

Windows 10 PC's over heating


It's a bit easier than that. Open Event Viewer, Administrative events, sort by event id, and look for 6005.
6005 = startup
6006 = shutdown.

 

Event Viewer (MCC.exe) crashes 'System.IO.IOException'

I'm afraid this is another Windows 1903 bug (current ver 1836.175) as it is reproducible on every (?) PC.

• run Event Viewer
• click 'Create Custom View' on the right panel
• create for example a filter for System, events 6005, 6006, give it a name and save it:
  
  
• then click on the left tree "Custom Views" and an mcc.exe crash will occur *Confused reporting a IO error reading "C:\ProgramData\Microsoft\Event Viewer\Views\View_0.xml"

P.S.
To roll-back you can from an admin prompt:
Code:

 

Event viewer shows 0 events for Start / Stop?

Hi. I'm running 1903.

For some years I have used a simple program called PC On/Off Time to monitor when my computer has been booted up, put to sleep and shut down. It isn't working correctly anymore after recently recovering my computer which installed 1903.

I contacted the developer and inquired whether or not he has noted this issue. He suggested I open the event viewer to see if these events are being logged. I believe I successfully followed the instructions on this page:
How to See PC Startup And Shutdown History in Windows 10 - Make Tech Easier

When I ordered then scrolled through events I could see events labeled 6005 and 6006 but they were not identified as start or stop events. When I filtered the log for 6005, 6006 specifically, the filter indicated 0 events.

Of note, during the recovery process I did engage the power button when I thought things had stalled out - nothing obvious happened and some time later recovery was completed and haven't noticed any unusual behavior. The only reason I noticed this is because of this light-weight program I like to use, primarily to monitor my personal sleep patterns.

Any thoughts would be greatly appreciated.

- - - Updated - - -

Never mind. I just opened the program again for the first time in a couple of days and it is displaying well enough - not the way it should but it works for what I need. It is an old program (pre W10) and it's free so I doubt it will be updated.
Might seek out another solution - thanks for looking. Sorry to take up your time and perhaps a moderator will delete this post if it is deemed irrelevant.