What is Winows System Event Viewer

The so-called "events" (event, also known as "Log"), refers to the operating system components, services or applications in the audit scope of the behavior, will be the system's event log service automatically recorded and saved to the event log. Viewing these events requires a dedicated tool called Event Viewer. The system administrator can quickly determine the state of the system, the cause of the error, the user's usage status, and so on, through the contents recorded in the event.

For example, in Windows XP, you can use the following methods to bring up the Event Viewer window:

Step 1: Click "Start" One "program" One "Event Viewer" menu.

Step 2: In the Run bar or in the Command Prompt window, use the command "Eventvwr.msc".

Step 3: Through the life of "eventvwr.msc" you can learn that Event Viewer is also a snap-in, so you can invoke the Event Viewer by adding an Event Viewer snap-in after you open the Console window using MMC.

Step 4: In the Run bar or in the Command Prompt window, use the command "Eventvwr.exe". The executable file is stored in the. /owindir%system32 folder.

There are three items on the left side of the Event Viewer window that are open, that is, application, security, System.

By default, the XP system automatically records the application and system events in addition to the security event. When Event Viewer is turned on, the contents are read from the Japanese log files that record various events for our browsing. When you select a type of event in the left pane, all information in such an event is listed in the right pane, such as the type of event, the time and date of occurrence, the source of the event, the name of the user who raised the event, and the name of the computer, as shown in the figure.

In addition to viewing local events, you can open events from other computers in the Event Viewer window. To do this, you need to do the following:

Step 1: Select the "Connect to another Computer" item from the shortcut menu that pops up as shown by selecting Event Viewer and right-clicking.

Step 2: In the "Select Computer" window shown in the picture, you can either enter the IP address of the remote computer directly in the "other computer" address bar, or you can search by clicking the Browse button to add a remote computer.

Step 3: After you add the remote computer, you can open the Remote Event View window as shown in the figure. Note that the parentheses in the right side of the Event Viewer text are the computed name or IP address of the remote computer.

If you are denied when connecting, check the following:

• Is simple file sharing enabled? If so, close it.

• Is sharing and printer sharing turned off in the firewall? If it is, please enable it.

• Do you use an account name that prohibits network access? If so, you need to change an account. Or create an account that the other person is using and log on to the computer, which can reduce the number of validation problems.