Skip to main content
Super User

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

6
  • I found an event that I would like to have highlighted in such a tool: Event Time = 2017-10-12 13:33:28.829; Level = Information; Channel = System; Provider = Microsoft-Windows-Kernel-General; Description = The operating system started at system time ‎2017‎-‎10‎-‎12T11:33:28.493096500Z
    – janpio
    Commented Oct 12, 2017 at 11:50
  • Another one: Event Time = 2017-10-12 13:35:12.829; Level = Information; Channel = System; Description = The process C:\WINDOWS\servicing\TrustedInstaller.exe (LENOVOX1) has initiated the Neustart of computer LENOVOX1 on behalf of user NT-AUTORITÄT\SYSTEM for the following reason: Betriebssystem: Aktualisierung (geplant) Reason Code: 0x80020003 Shutdown Type: Neustart Comment:
    – janpio
    Commented Oct 12, 2017 at 11:57
  • You are asking an off-topic question (software shopping). Questions seeking product, service, or learning material recommendations are off-topic. See On Topic. Try softwarerecs.stackexchange.com but please first read What is required for a question to contain "enough information".
    – DavidPostill ♦
    Commented Oct 12, 2017 at 19:45
  • I reworded my question to make clear that I am not looking for software, but a solution to the problem I have. I am happy no matter if it is a CLI command, a way to configure Event Viewer or another tool.
    – janpio
    Commented Oct 13, 2017 at 8:24
  • The filter would be to find out the corresponding EventIDs and filter for EventIDs which is rather easy in the default view. Alternatively you could write a script e.g. using PowerShell using Get-EventLog.
    – Seth
    Commented Oct 13, 2017 at 8:33