Event Log Service in Event Viewer to view the on-and shutdown times of the computer

You can use the Event Log Service in the event viewer to view the computer's on and off time. Because the Event Log service starts and closes along with the computer, and records the event log.

It is necessary to introduce two IDCs: 6006 and 6005. In the event viewer, an event with the ID number 6006 indicates that the event log service has stopped. If you did not find an event with the ID number 6006 In the event viewer of the day, this means that the computer is not shut down normally, probably because of system reasons or the computer power key is pressed directly, and the normal shutdown operation is not performed. When you start the system, Event Log Service of Event Viewer starts. This is the event with the ID number 6005.

With the information saved by these two IDCs, we can easily view the opening and shutdown records of the computer: Open "Control Panel", double-click "Management Tools", and open "Event Viewer ", select the System option in the window on the left. Right-click, select "properties" from the shortcut menu, and select the "filter" tab in the "System Properties" window that appears, under "Event Type", select "info" option and select "EventLog" option in the "event source" list. After setting other conditions, click "OK, you can see the required event records. Double-click a record. If the description is "Event Service started", it indicates the time when the computer is started or restarted. If the description is "Event Service stopped ", that is, the shutdown time of the computer.