Skip to content

TechRepublic

  • Top Products Lists
  • Developer
  • 5G
  • Security
  • Cloud
  • Artificial Intelligence
  • Tech & Work
  • Mobility
  • Big Data
  • Innovation
  • Cheat Sheets
  • TechRepublic Academy
  • CES
  • TechRepublic Premium
  • Top Products Lists
  • Developer
  • 5G
  • Security
  • Cloud
  • Artificial Intelligence
  • Tech & Work
  • Mobility
  • Big Data
  • Innovation
  • Cheat Sheets
  • TechRepublic Academy
  • CES
  • See All Topics
  • Sponsored
  • Newsletters
  • Forums
  • Resource Library
TechRepublic Premium
Join / Sign In
Microsoft

7 ways to save time with event viewer

By greg shultz May 20, 2012, 11:02 AM PDT

Image
1
of 16

slide1.jpg
slide1.jpg
7 ways to save time with event viewer

Image: NVIDIA

nt 

n

ntWindows 7’s Event Viewer can hold a lot of information that can help you to solve problems. In this tip gallery, I’ll show you seven ways that you can save time with Windows Event Viewer.

n

nt 

n

ntImage created by Greg Shultz for TechRepublic.

Image: NVIDIA
7 ways to save time with event viewer

nt 

n

ntWhen you first open Event Viewer you can save time by starting your investigation with the Summary of Administrative Events panel. It will immediately show you what types of events have been logged over some specific time frames: Last Hour, 24 Hours, and 7 Days.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntWhen you expand a branch in the summary, you’ll see that the events come from all of the applicable event logs. To get more details about a particular event, just double-click it.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntEvent Viewer does such a good job at logging events, that the number of items in its logs can be staggering. You can save yourself time by creating filters.

n

ntFor example, suppose that you’re troubleshooting a Kerberos problem and want to see all events in the System event log related to the Time Service for the last week.  Select the System log in the Tree panel and select Filter Current Log in the Action panel. When you see the Filter Current Log dialog box, select Last 7 days from the Logged drop down, select the check boxes for Event Levels of Critical, Error and Warning, and from the Event Sources drop down select Time Service. Then, click OK.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntWhen you are using a Filter, you’ll only see those events in the chosen event log.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntFilters will remain active until you click Clear Filter or exit Event Viewer. If the filter will be useful over a longer period, you can save yourself time by turning the Filter into a Custom View.

n

ntWhile the Filter is active, select Save Filter to Custom View in the Action panel. When you see the Save Filter to Custom View dialog box, just give it a name and description and click OK.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntYou can now find the new view in the Custom Views branch in the Tree panel.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntFilters and Custom Views are great features, but they are designed for discovering an event after it has already happened. If you want to know exactly when an event occurs, you can save yourself time by attaching a task to an event.

n

ntWhile the Filter or Custom View is active, select the Attach Task To This Event in the Action panel. When you see the Create Basic Task Wizard dialog box, just give it a name and description and click Next.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntYou can choose to Start a program, Send an email or Display a message. When you finish the wizard, Event Viewer creates a scheduled Task in Task Scheduler that will run whenever the event occurs.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntIf there is another computer on your network that you want to investigate, you can save yourself time by using Event Viewer’s remote connection feature.

n

ntTo begin, right click on the Event Viewer (Local) in the Tree panel and select Connect to another computer. When you see the Select Computer dialog box, type or Browse for name of the computer, and click OK.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntWhen you are connected, you can use any of your Filters or Custom Views to view events on the remote computer.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntIf there are multiple computers on your network that you want to gather information from, you can save yourself time by using Event Viewer’s Subscription feature.

n

ntTo begin, right click on Subscriptions in the Tree panel and select Create Subscription. When you do, you may be prompted to start the Windows Event Collector service.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntWhen you see the Subscription Properties dialog box, enter a name and description and then click the Select Computers button and use the controls in the Computers dialog box to choose the computers you want. Then, click the Select Events button/drop down, choose the Copy from existing Custom View command and choose your view from the Open Custom Views dialog box. Click OK in the Subscription Properties dialog box to complete the operation.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntAs soon as you create a Subscription, Event Viewer will automatically collect information from those computers on the network. To see the event subscription, select the Forwarded Events log. Keep in mind that the Windows Remote Management and Windows Event Collector services must also be running on the remote computers. For specific details, see the Event Viewer Help system.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

ntEven with Filters and Custom Views to help you sift through an event log, there can be so much old data in a log that it gets cumbersome. You can save yourself time by using Event Viewer’s Save and Clear feature.

n

ntTo do so, select Clear Log in the Action panel. When you see the Event Viewer dialog box, click the Save and Clear button. In the Save As dialog box, enter a descriptive name and select any one of the available file types.

n

ntImage created by Greg Shultz for TechRepublic.

7 ways to save time with event viewer

nt 

n

nt

ntt

ntttWhat’s your favorite Windows Event Viewer Tip? Share your comments in the TechRepublic Community Forums and let us hear from you. 

ntt

ntttImage created by Greg Shultz for TechRepublic.

nt

n

n

nt 

  • Microsoft
  • Account Information

    Share with Your Friends

    7 ways to save time with event viewer

    Your email has been sent

Share: 7 ways to save time with event viewer
Image of greg shultz
By greg shultz
My first computer was a Kaypro 16 \"luggable\" running MS-DOS 2.11 which I obtained while studying computer science in 1986. After two years, I discovered that I had a knack for writing documentation and shifted my focus over to technical writing.
  • Account Information

    Contact greg shultz

    Your message has been sent

  • |
  • See all of greg's content

TechRepublic Premium

  • TechRepublic Premium

    Software licensing policy

    Organizations spend a fortune on software licenses every year, and a lack of management around it can result in heavy fines. This policy will help you establish guidelines to make sure you’re in compliance and that any audits will be painless. From the policy: Staying in compliance with software licenses can be quite difficult. End ...

    Published:  February 5, 2023, 11:00 AM EST Modified:  February 6, 2023, 1:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    IT hardware procurement policy

    A strong hardware procurement policy will ensure that requirements are followed and that all purchases are subject to the same screening and approval processes. This comprehensive policy covers the essential aspects of the purchasing process. From the policy: PURPOSE This policy establishes a framework for the purchase of company hardware in a fashion that will: ...

    Published:  February 5, 2023, 11:00 AM EST Modified:  February 6, 2023, 1:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    Shadow IT policy

    Shadow IT is a concept whereby an organization’s employees use technology, services or systems without the knowledge of or approval from the IT department. It has arisen due to several reasons: Advances in cloud computing, which involve the usage of applications or sharing of data in public environments previously owned by IT. The evolution of ...

    Published:  February 2, 2023, 11:00 AM EST Modified:  February 3, 2023, 2:00 PM EST Read More See more TechRepublic Premium
  • TechRepublic Premium

    Auditing and logging policy

    Auditing and logging are essential measures for protecting mission-critical systems and troubleshooting problems. This policy outlines the appropriate auditing and logging procedures for computer systems, networks and devices that store or transport critical data. From the policy: Many computer systems, network devices and other technological hardware used in the enterprise can audit and log various ...

    Published:  February 2, 2023, 11:00 AM EST Modified:  February 3, 2023, 3:00 PM EST Read More See more TechRepublic Premium

Services

  • About Us
  • Newsletters
  • RSS Feeds
  • Site Map
  • Site Help & Feedback
  • FAQ
  • Advertise
  • Do Not Sell My Information

Explore

  • Downloads
  • TechRepublic Forums
  • Meet the Team
  • TechRepublic Academy
  • TechRepublic Premium
  • Resource Library
  • Photos
  • Videos
  • TechRepublic
  • TechRepublic on Twitter
  • TechRepublic on Facebook
  • TechRepublic on LinkedIn
  • TechRepublic on Flipboard
© 2023 TechnologyAdvice. All rights reserved.
  • Privacy Policy
  • Terms of Use
  • Property of TechnologyAdvice