The Event Viewer is an Administrative tool that records events that occur on your computer. When the system or application runs into any bugs, errors, or security issues, the event logs will have the information that caused the problem. Although it does not solve the issue at hand, the Event logs give you the necessary information to begin the troubleshooting process.
Understanding Event Viewer Layout
In the Event Viewer window, you will see three panels. The left side is the navigation panel, the middle one displays the event details and the right side is for performing actions like saving or loading event logs.
The Navigation panel is the left side panel where event logs are categorized into three specific folders. These folders are common in all versions and editions of Windows. These are Custom Views, Windows Logs, and Application and Services Logs.
Windows logskeep track of every event from the Windows OS and contain a list of the following event log categories:
Application and Service Logscontain events from hardware connections/alerts, third-party applications, and PowerShell events.
Finally, any custom filter you create through the action panel will be stored in theCustom Viewsevent log. By default, this section will have a sub-category named Administrative Events. you may use this to view all Critical, Warning, and Error events from the log history.
Custom event logs named Administrative Events are created automatically on all versions of Windows.
On the Navigation panel, if you select Event Viewer (Local), you will get an Overview and Summary in the Details panel. Here, you may get a quick review of all the administrative events, recently viewed logs, and Log Summary.
The Events panel displays the list of recorded event logs and the level of the recorded event whether it is information, warning, error, or critical. Among these, event logs indicating Error should be given high priority and should be looked into right away.
If you double-select the events, a new dialog box opens up showing all the event properties. It contains a log description along with numerous entries. Among these entries, Log Name, Source, Event ID, Logged, Level, and OpCode are a few of the crucial ones.
Event Actions allows you to perform actions like save logs, open saved logs, create a custom view, clear event logs, filter current logs, and view properties of the selected log.
Save and Open Event Logs
Saving Event logs allows you to get the event details and view them on another PC. To save logs in the event viewer,
Once you open saved logs, a log category named Saved Logs will appear on the Event Viewer panel located on the left side.
