Introduction to the Log Viewer feature in Windows Vista systems

When problems occur with our Windows system, the simplest way to analyze and locate failures is to use Event Viewer, such as Event Viewer in Windows XP, to let us analyze system logs, application logs, and security logs to find clues to possible problems. However, objectively speaking, before the Windows version includes the Windows XP Event Viewer in the use of a lot of shortcomings, many times the information given is inflexible, vague, not enough to let us accurately locate possible failures, and when the information to be found drowned in a large number of events, Simple event filtering and query mechanisms often make it difficult to find and locate quickly.

In Windows Vista, Microsoft has made useful improvements to the log viewer in many ways, and is more "practical" in terms of fault location than previous versions.

Event Viewer in Windows Vista

In Windows Vista, when you open the Event Viewer, you will notice that although the Event Viewer follows the previous display format, there are significant changes:

The biggest change is the addition of a new "action" Panel on the right, but frankly, the personal sense of the change is small: the action panel simply points out that the commands in the context menu are now taken out separately, giving the user another way to replace them, in fact, It is estimated that many users prefer to use the right-click menu to choose the appropriate action, after all, it seems more comfortable, and do not have to move the mouse.

Another important change is that the tree catalog in the left side panel is more complex and detailed, and Microsoft has added many new log type records to Windows Vista, covering management, operations, analysis, debugging, and more. If you open the Application log (application Logs), you can see a series of log types, including many logs named diagnostic (diagnostic).

Also, when you click on many of the items shown in the View panel above, you may even find that they still have finer classifications. In this way, the log viewer in Windows Vista can record and classify events at different levels, making it easier to find and locate faults, allowing users to more visually analyze problems in the system.

More efficient event filtering mechanism

Another important improvement in Event Viewer in Windows Vista is the provision of more efficient event filtering mechanisms. By setting appropriate filtering rules, users can more specifically view different events, such as filtering out different event sources, categories, event IDs, users, computers, and events within a specific time frame, or filtering based on different event types such as information, warnings, errors, and so on.

To set the appropriate filter, simply right-click the appropriate log, select New Log View, and then set the appropriate filter rules in the properties.

It should be emphasized that when the log viewer in Windows Vista sets the filter, the user can choose to filter by a specific keyword, which is not available in previous versions of the log viewer and helps users find the appropriate event more efficiently.

At the same time, the log viewer in Windows Vista has added "critical (critical)" "Verbose (Verbose)" Two options compared to the relatively broad types of events in Windows XP that are classified as information, warnings, errors, and so on. This allows users to be more targeted when locating and locating faults, such as setting a filter to view all severity events in the Application log and system log, so that critical events that affect the system's operation can be viewed in the same view in multiple logs.

Consolidating events from multiple logs into a single view

Finally, you can also take a friendly name for the log view you created, or set which users can view it, whether it is the current user or all users on that computer.

Note : More wonderful tutorials Please pay attention to the triple computer tutorial section, triple Computer office group: 189034526 Welcome to join