Windows 10: Windows Event Log Service Restart/Shutdown logs

Hi, I had a question regarding the logistics of Windows Event Log.


I'm trying to build a service that depends on time, and am trying to use Windows Event Log's timestamps for specific events, mainly power-related events such as Restart/Shutdown/Dirty Shutdown and Time Changes.


I wanted to make sure however, that these times are always recorded and was experimenting with the service. I tried to disable the logging service by going to the service manager, and made it so the "Windows Event Log" Service doesn't start up. In fact, after doing so and restarting, I couldn't view Windows Event Viewer due to the logging service not running.


In the meantime, I changed the system time, restarted the device again, and finally turned the "Windows Event Log" service back on.


Checking the Event Viewer, I found a lot of errors, mainly event 10005, 7001, and a bit of 7023. This was expected, since with the log service not running, several other services would be impacted as well.


What I found surprising was that, among the long list of errors, I was able to find some information logs of event id 1074 and 1, which corresponded to the system restart and system time change.


So, my question is..

How does Windows Log these information Restart, time change when the Windows Event Log service is not running? Can I be safe to assume that these events will always be logged even if the Event Log service is not running?


Thank you.

:)

 

random shutdown problem in event log

im expierenceing random shutdowns when playing games but the wierd part is is that the mouse stays on and the keybaord. and when i wiggle the mouse the computer boots up.

would this weird error be an error in the the event log.
if so what would it be under????

 

"Windows Event Log" service not starting

When I start the "Windows Event Log" service I get the following error:

Windows could not start the Windows Event Log service on Local Computer.

Error 15008: The specified xml text was not well-formed. See Extended Error for more details.

Any suggestion on how to make this sevice work again?

Thanks,

 

"Windows Event Log" service not starting

Thanks for the answer.

Unfortuantely your suggestions did not solved the problem: the clean boot didn't help me in find/solve the issue and, as suggested by BugsB, I restarted the machine in safe mode but I didn't found any MBR error.

Is there any file that can be copied from another machine in order to restore the Windows Event Log service ?