Using Event Viewer

Updated: January 21, 2005

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Using Event Viewer

You can use Event Viewer to monitor events that are recorded in the Application, Security, and System logs. By using the event logs in Event Viewer, you can gather information about hardware, software, and system problems. You can also monitor security events. For more information, see Event Viewer.

Tags :


Community Content

Robert Moris
I`m getting this error, category 100, event 1000
<div>Event Type:Error</div> <div>Event Source:Application Error</div> <div>Event Category:(100)</div> <div>Event ID:1000</div> <div>Date:25.2.2010 ã.</div> <div>Time:14:31:01</div> <div>User:N/A</div> <div>Computer:SAV-SERVER</div> <div>Description:</div> <div>Faulting application svchost.exe, version 5.2.3790.3959, faulting module unknown, version 0.0.0.0, fault address 0x784c0054.</div> <div> <br /> </div> <div>For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.</div> <div>Data:</div> <div>0000: 41 70 70 6c 69 63 61 74 Applicat</div> <div>0008: 69 6f 6e 20 46 61 69 6c ion Fail</div> <div>0010: 75 72 65 20 20 73 76 63 ure svc</div> <div>0018: 68 6f 73 74 2e 65 78 65 host.exe</div> <div>0020: 20 35 2e 32 2e 33 37 39 5.2.379</div> <div>0028: 30 2e 33 39 35 39 20 69 0.3959 i</div> <div>0030: 6e 20 75 6e 6b 6e 6f 77 n unknow</div> <div>0038: 6e 20 30 2e 30 2e 30 2e n 0.0.0.</div> <div>0040: 30 20 61 74 20 6f 66 66 0 at off</div> <div>0048: 73 65 74 20 37 38 34 63 set 784c</div> <div>0050: 30 30 35 34 0054 </div> <div> <br /> </div>
Tags : event 1000

Thomas Lee
Error Perflib Event ID: 1010
In Windows Server 2003, when I try start the Performance Monitor, I get an event error: "The Collection Procedure for the "Spooler" service in DLL "C:\Windows\system32\winspool.drv" generated an exception or returned an invalid status. Performance data returned by counter DLL will not be returned in Perf Data Block. The exception or status code returne is the first DWORD in the attached data." <p>Any ideas?<br /></p><br /><br /><pre>[tfl - 27 06 09] Hi - and thanks for your post.You should post questions like this to the Technet Forums at <mtps:InstrumentedLink NavigateUrl="http://forums.microsoft.com/technet" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://forums.microsoft.com/technet</mtps:InstrumentedLink> or the MS Newsgroups at <mtps:InstrumentedLink NavigateUrl="http://www.microsoft.com/communities/newsgroups/en-us/" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://www.microsoft.com/communities/newsgroups/en-us/</mtps:InstrumentedLink>. You are much more likely get a quick response using the forums than through the Community Content. For specific help about:<br />Exchange : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.exchange%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.exchange%2C</mtps:InstrumentedLink>&amp;<br />SQL Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.sqlserver%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.sqlserver%2C</mtps:InstrumentedLink>&amp;<br />Windows : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows%2C</mtps:InstrumentedLink>&amp;<br />Windows Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows.server%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows.server%2C</mtps:InstrumentedLink>&amp;<br />Virtual Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/group/microsoft.public.virtualserver/topics?lnk" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/group/microsoft.public.virtualserver/topics?lnk</mtps:InstrumentedLink><br />Full Public : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public%2C</mtps:InstrumentedLink>&amp;<br /></pre>

Thomas Lee
I am getting the follow message in my event view!
<p>The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/server1<br /><br /></p> <pre>[tfl - 27 06 09] Hi - and thanks for your post.You should post questions like this to the Technet Forums at <mtps:InstrumentedLink NavigateUrl="http://forums.microsoft.com/technet" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://forums.microsoft.com/technet</mtps:InstrumentedLink> or the MS Newsgroups at <mtps:InstrumentedLink NavigateUrl="http://www.microsoft.com/communities/newsgroups/en-us/" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://www.microsoft.com/communities/newsgroups/en-us/</mtps:InstrumentedLink>. You are much more likely get a quick response using the forums than through the Community Content. For specific help about:<br />Exchange : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.exchange%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.exchange%2C</mtps:InstrumentedLink>&amp;<br />SQL Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.sqlserver%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.sqlserver%2C</mtps:InstrumentedLink>&amp;<br />Windows : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows%2C</mtps:InstrumentedLink>&amp;<br />Windows Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows.server%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public.windows.server%2C</mtps:InstrumentedLink>&amp;<br />Virtual Server : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/group/microsoft.public.virtualserver/topics?lnk" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/group/microsoft.public.virtualserver/topics?lnk</mtps:InstrumentedLink><br />Full Public : <mtps:InstrumentedLink NavigateUrl="http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public%2C" runat="server" xmlns:mtps="http://msdn2.microsoft.com/mtps">http://groups.google.com/groups/dir?sel=usenet%3Dmicrosoft.public%2C</mtps:InstrumentedLink>&amp;<br /></pre>

Page view tracker