IIS Event Viewer _webserver Event Viewer help view Iis-web Server event execution log

The IIS server is our common Web site Deployment tool, and we may sometimes encounter an application pool of IIS servers inexplicably shut down, or other unknown reasons, and so on, we can help us find the reason through Microsoft's Webserver (Web Service Event Viewer).

Open methodEditMethod One: You can click the right mouse button to "My Computer" (windows7 "Computer"), in the Popup shortcut menu, select "Manage", will pop up the Computer Management menu, select "Event Viewer" under the menu, click will appear three options, The system can help users see the last time the computer was switched on and off. Method Two: Click "start → run", enter EVENTVWR, click "OK", you can open the Event Viewer. Method Three: Click Start-Settings-control Panel-Administrative Tools-Event Viewer to open the Event Viewer window. Method Four: In the Run dialog box, manually type "%systemroot%/system32/eventvwr.msc/s" to open the Event Viewer window. Method Five: The quickest way, click "Start", enter "event" or "Event Viewer".

The following is the text of Baidu Encyclopedia:

Reference article link: http://baike.baidu.com/view/1035.htm

Storing logs

Microsoft is integrated into Windows 2000/nt/xp/2003 and other operating systems.

Action page

Viewer, which can do a lot of work, such as auditing system events and hosting systems, security, and application logs.

The system log contains information, warnings, or errors generated by the Windows operating system. By looking at this information, warning, or error, users can not only learn about a feature configuration or the success of a run, but also understand why some of the system's functions failed or became unstable. [2]

The security log holds information about whether the audit event was successful. By looking at this information, users can see whether these security audits result in success or failure. [2]

The Application log holds information, warnings, or errors generated by the application. By looking at this information, warning, or error, users can learn which applications are running successfully, what errors or potential errors have occurred. Program developers can use these resources to improve applications. [2]

Solve the problem

Edit

After you have identified the events that are causing the system problems, you need to find a way to resolve them. There are two ways to find solutions to these problems: Microsoft Online Technical Support Knowledgebase and EventID. NET Web site.

Microsoft Online Technical Support Knowledge Base (KB): Microsoft Knowledge Base article is composed of Microsoft Official information and Microsoft MVP (Microsoft's most valuable expert) writing technical articles, mainly to solve the problems and failures of Microsoft products.

When a bug and an error-prone application point are found for each Microsoft product, there will be a solution to this error with its corresponding KB article.

In the Microsoft Knowledge Base page, on the left of the "search (Knowledge Base)" Enter the relevant keywords to query, the event occurs source and ID and other information. Of course, entering the detailed description of the keywords is also a good way, if the log has an error number, enter this error number to query is not a bad idea.

Eventid. NET website: This site is hosted by a number of Microsoft MVP (Most valuable experts) and contains almost all system event solutions.

When you sign in to the Web site, click the Search Events link and the event search page appears. Based on the page prompts, enter the event ID (the incident ID) and the event source (event feed) and click the "Search" button. The site's system will find all the relevant resources and solutions. Most importantly, enjoying these solutions is completely free. Of course, paid users of the site can enjoy better services, such as direct access to the Knowledge Base article set for an event, and so on.

In addition to these two sites, the Microsoft Chinese Community provides free online technical support and regular expert chat, as long as the use of a small, can become a solution to the system of the valuable resources of the incurable diseases.

Common ID Codes

Edit

Id	Type	Source	Explanation of the meaning of the representative
2	Information	Serial	The system detects the FIFO (FIFO) when verifying that the \DEVICE\SERIAL1 is indeed a serial port. This method will be used.
17	Error	W32Time	Time provider NtpClient: An error occurred while DNS was querying a manually configured peer machine. NtpClient will retry the NDS query within 15 minutes. The error is: The socket operation attempted a host that could not be connected. (0x80072751)
20	Warning	Print	The printer driver for the Windows NT x86 Version-3 has been added or updated by Canon Pixma iP1000. Files:-CNMDR6e.DLL, CNMUI6e.DLL, CNMCP6e.DLL, Cnmmh6e.hlp, CNMD56e.DLL, CNMUR6e.DLL, CNMSR6e.DLL, Cnmin6e.ini, CNMPI6e.DLL, CNMSM6e.EXE, CNMSS6E.SMR, CNMSD6e.EXE, CNMSQ6e.EXE, Cnmsh6e.hlp, cnmsh6e
26	Information	Application Popup	Popup application: Rsaupd.exe-component not found: MFC71 not found. DLL, so this application failed to start. Reinstalling the application may fix the problem.
29	Error	W32Time	The time service provider NtpClient is configured to obtain time from one or more time sources, but none of the sources can be accessed. Attempts to contact the time source are not made within 14 minutes. NtpClient There is no time source for accurate time.
35	Information	W32Time	The time service now synchronizes the system time with the time source.
115	Information	Srservice	System Restore monitoring is enabled on all drives.
116	Information	Srservice	System Restore monitoring is disabled on all drives.
1001	Information	Save Dump	The computer has been restarted since the error was detected.
1005	Warning	Dhcp	Your computer has detected that the IP address of the network card with 00e04c47978d is already in use on the network. The computer will automatically get another address.
3260	Information	Workstation	This computer was successfully added to Workgroup ' workgroup '.
4202	Information	Tcpip	The system detects the NIC Realtek ... Family PCI Fast Ethernet NIC-Packet Scheduler miniport is disconnected from the network and the network configuration of the NIC is released. If the NIC is not disconnected, this could mean that it has failed. Please contact your vendor for an updated driver.
4226	Warning	Tcpip	TCP/IP has reached the security limit of the number of concurrent TCP connection attempts.
4377	Information	NtServicePack	Windows XP Hotfix KB873339 was installed.
6005	Information	EventLog	The Event Log service is started. Post
6006	Information	EventLog	The Event Log service has stopped. (Shut down)
6009	Information	EventLog	Press CTRL, ALT, delete (not normal) to shut down
6011	Information	EventLog	The NetBIOS name and DNS hostname of this machine are changed from MachineName to AA.
7000	Error	Service Control Manager	The Npkcrypt service failed to start due to the following error:
7031	Error	Service Control Manager	The Eset service service terminated unexpectedly, which has occurred 1 of times. The following remediation operation will run within 0 milliseconds: Restart the service.
7035	Information	Service Control Manager	The XXX service successfully sent a start control.
7036	Information	Service Control Manager	The XXX service is in a state of running or stopping.
8033	Information	BROWSER	Because the master browser has stopped, the browser makes a mandatory election on the network.
10000	Error	Dcom	The DCOM server could not be started. Error:
15007	Information	HTTP	A reservation to the namespace identified by the URL prefix http://*:2869/was successfully added.
60054	Information	Setup	Setup successfully completed the installation of Windows build 2600.
64002	Information	Windows File Protection	An attempt was made to replace a file on a protected system file. In order to maintain the stability of the system, this file is restored to the original version. The file version of the system file is 6.5.2600.3497.
64008	Warning	Windows File Protection	The protected system files could not be verified because Windows File Protection was interrupted. Please use the SFC tool to verify the integrity of the file in a moment.

IIS Event Viewer _webserver Event Viewer help view Iis-web Server event execution log