The Windows seventh version of the operating system implements the function of tracking important events that occur at work At Microsoft, the concept of "events" refers to any incidents in the system that are recorded in a special log and signal themselves to users or administrators. This could be a utility that doesn't want to run, apps that crash, or devices that don't install correctly. All incidents registers and saves the Windows 7 event log. It also arranges and shows all actions in chronological order, helps to perform system control, ensures the security of the operating system, corrects errors and diagnoses the entire system.
You should review this log periodically for new information and configure the system to save important data.
Windows 7 - programs
The Event Viewer computer application is the main part of the Microsoft utility utilities that are designed to monitor and view the event log. it essential tool to monitor the health of the system and eliminate emerging errors. The Windows utility that manages incident documentation is called the Event Log. If this service is running, then it starts collecting and logging all important data in its archive. The Windows 7 event log allows you to do the following:
Viewing data recorded in the archive;
Using various event filters and saving them for further use in system settings;
Creating a subscription for specific incidents and managing them;
Assign specific actions when any events occur.
How to open the Windows 7 event log?
The program responsible for registering incidents is launched as follows:
1. The menu is activated by pressing the "Start" button in the lower left corner of the monitor, then the "Control Panel" opens. In the list of controls, select "Administration" and already in this submenu click on "Event Viewer".
2. There is another way to view the Windows 7 event log. To do this, go to the Start menu, type mmc in the search box and send a file search request. Next, the MMC table will open, where you need to select a paragraph indicating the addition and removal of snap-ins. Then the Event Viewer is added to the main window.
What is the described application?
AT operating systems Windows 7 and Vista have two events installed: System Archives and Application Service Log. The first option is used to capture system-wide incidents that are related to the performance of various applications, startup and security. The second option is responsible for recording the events of their work. To control and manage all data, the "Event Log" service uses the "View" tab, which is divided into the following items:
Application - events that are associated with a particular program are stored here. For example, postal services store in this place the history of information transfer, various events in mailboxes, and so on.
The "Security" item saves all data related to logging in and out of the system, using administrative features and accessing resources.
Installation - This Windows 7 event log records data that occurs during the installation and configuration of the system and its applications.
System - captures all OS events, such as a failure to start service applications or when installing and updating device drivers, various messages related to the operation of the entire system.
Forwarded events - if this item is configured, then it stores information that comes from other servers.
Other sub-items of the main menu
Also in the "Administration" menu, where the event log in Windows 7 is located, there are such additional items:
Internet Explorer - events that occur during the operation and configuration of the browser of the same name are registered here.
Windows PowerShell - Incidents related to the use of the PowerShell shell are recorded in this folder.
Hardware Events - if this item is configured, then the data generated by devices is logged.
The entire structure of the "seven", which provides a record of all events, is based on the type of "Vista" on XML. But to use the event log program in Window 7, you don't need to know how to use this code. The Event Viewer application will do everything by itself, providing a convenient and simple table with menu items.
Incident Characteristics
A user who wants to know how to view the Windows 7 event log must also understand the characteristics of the data that he wants to view. After all, there are various properties of certain incidents described in the Event Viewer. These features will be discussed below:
Sources - a program that captures events in the log. The names of the applications or drivers that affected a particular incident are recorded here.
Event code - a set of numbers that determine the type of incident. This code and event source name is used technical support system support for and elimination of software failures.
Level - the degree of importance of the event. The system event log has six levels of incidents:
1. Message.
2. Caution.
3. Mistake.
4. Dangerous mistake.
5. Monitoring of successful error correction operations.
6. Audit of unsuccessful actions.
Users - captures the data of accounts on behalf of which the names of various services occurred, as well as real users.
Date and time - records the timing of the occurrence of the event.
There are many other events that occur during the operation of the operating system. All incidents are displayed in the "Event Viewer" with a description of all related information data.
How to work with the event log?
Highly important point in protecting the system from crashes and freezes is the periodic review of the "Application" log, which records information about incidents, recent actions with a particular program, and also provides a choice of available operations.
Going into the Windows 7 event log, in the "Application" submenu, you can see a list of all programs that caused various negative events in the system, the time and date of their appearance, the source, and the degree of problem.
User responses to events
After learning how to open the Windows 7 event log and how to use it, you should further learn how to apply with this useful Task Scheduler application. To do this, right-click on any incident and select the menu for linking a task to an event in the window that opens. The next time such an incident occurs in the system, the operating system will automatically launch assigned task to handle the error and fix it.
An error in the log is not a reason to panic
If looking at a magazine system events Windows 7, you will see system errors or warnings that appear periodically, then you should not worry and panic about this. Even with a perfectly working computer, various errors and failures can be recorded, most of which do not pose a serious threat to the health of the PC.
The application described by us was created in order to make it easier for the system administrator to control computers and troubleshoot emerging problems.
Conclusion
Based on the foregoing, it becomes clear that the event log is a way that allows programs and the system to record and save all events on a computer in one place. This log stores all operational errors, messages, and warnings from system applications.
Where is the event log located in Windows 7, how to open it, how to use it, how to fix errors that have appeared - we learned all this from this article. But many will ask: “Why do we need this, we are not system administrators, not programmers, but ordinary users who, as it were, do not need this knowledge?” But this approach is wrong. After all, when a person gets sick with something, before going to the doctor, he tries to cure himself in one way or another. And many often do. Similarly, a computer, which is a digital organism, can “get sick”, and this article shows one of the ways how to diagnose the cause of such a “disease”, based on the results of such an “examination”, you can make the right decision about the methods of subsequent “treatment”.
So the information about the way to view events will be useful not only to the system engineer, but also to an ordinary user.
Windows 7 and Windows 10 constantly monitors the system for any unusual or noteworthy situations, such as a service not running, a device installation, or an application error. All these situations are called events and are logged in several different logs.
For example, the Application log stores events related to the operation of applications, both Windows 7 programs itself and third-party applications, and the System log stores events generated by the Windows 7, 10 system and components such as device drivers and system services.
How to open the windows event log
To open the event log in windows, click on the button Start by typing in the search field event viewer and pressing the key<Enter>. The figure below shows what the snap-in's home page looks like, showing the windows event log, a list of recently viewed nodes, and various actions available.
Viewing the Windows Event Log
The panel on the right offers three sections: Custom Views, Windows Logs, and Applications and Services Logs.
The Custom Views section lists all of the event types defined in the current system (which are discussed in more detail a little later). If you perform filtering in one of the event logs or create a new event view, the new view is saved in this section.
The Windows Logs section displays several subsections, four of which represent the main logs maintained by the system itself.
The Application and System event logs should be checked regularly for early detection of any existing problems and warnings that some problems may appear in the future. The Safety log is not essential to the daily maintenance procedure. You should look into it only if there are suspicions of a violation of the computer's security, for example, to find out who is logging into the system.
Device driver errors are logged in the System log, but other tools are available in Windows 7 to make it easier to investigate device problems. For example, Device Manager, which appears to display an icon for devices that are having problems and allows you to view a description of those problems by opening the device's property sheets. There is also a utility System Information (Msinfo32.exe), which reflects information about all problems with the equipment in the sections System Information > Hardware Resources > Conflicts and sharing and System Information > Components > Defective Devices.
When you select one or another log, a list of all events available in this log appears in the central window, along with information about the date and time when each event occurred, its source, type (Details, Warning or Error), and other similar information. The following are the main interface changes and new functionality that appeared in the Event Viewer snap-in in Windows.
- In the Viewing Area panel, basic event data is now displayed on the General tab, while additional, more specific data is displayed on the Details tab. This pane can be toggled on and off by selecting View Area from the View menu.
- Event data is now stored in XML format. You can view their schema by selecting the XML Mode radio button on the Details tab inside the Viewport pane.
- The Filter command now allows you to generate queries in XML format.
- Clicking the Create Custom View link now allows you to create a new view based on a particular event log, specific event type, event ID, and so on.
- You can now bind tasks to events by clicking first on the event of interest, and then on the link Bind a task to an event and then creating using the appropriate wizard desired task, which either runs a program or script, or sends an email each time a given event occurs.
- Favorite events can now be saved as an Event File (.elf) file.
The most common areas of activity for which specialized profiles have been created software products. 1s 8 online is regulated accounting, trade and warehouse accounting, management accounting and integrated solutions
The Applications and Services Logs section lists programs, features, and services that support the standard event logging format, which is new in Windows 7. Previously, all items in this section were logged in separate text files that could not be accessed in older versions of the Event Viewer snap-in other than by specifically opening the log file.
Huge hello everyone!!
It's no longer a secret that in the Windows SEVEN operating system, just like in Windows Vista, there are two categories of event logs: application and service logs and Windows logs.
Windows logs - the operating system uses to log system-wide events that are related to the operation of system components, applications, security and startup. Logs of applications and services - applications and services are used to register events that are associated with their work. You can use the Event Viewer snap-in or the wevtutil command-line tool to manage event logs.
I want to dwell on how you can work with event logs:
In order to view these same application log events, we need to perform the following steps:
Select "Windows Logs" in the console tree.
Select the "Applications" log.
If possible, it's a good idea to review the System and Application event logs frequently and look for problems and warnings that may predict problems in the future. The middle window displays the available events when a log is selected, including the date of the event, the level of the event, the time and source, and more.
The Viewport pane shows event data on the General tab, and the Details tab shows additional specific data.
This panel can be turned on and off by selecting the View menu and then the Viewport command.
It is recommended to keep logs for the last few months for critical systems. As a rule, it is not very convenient to assign magazines such a size that all the information fits in them, and therefore this problem can be solved in a different way. Logs can be exported to files located in a specified folder. To save the selected log, do the following:
Select the event log to be saved in the console tree;
Select the "Save events as" command from the "Action" menu or select the "Save all events as" command from the context menu of the log;
In the "Save As" dialog, select the folder where the file should be saved. If you need to save a file in a new folder, you can create it directly from this dialog using the context menu or the "New Folder" button on the action bar. In the "File type" field, select the desired file format from the available ones: event files - *.evtx, xml file - *.xml, tab-separated text - *.txt, comma-separated csv - *.csv. Enter a name in the "File Name" field and click the "Save" button. Click on the "Cancel" button to cancel saving.
If the event log is not intended to be viewed on another computer, leave the default option "Do not display information" in the "Display information" dialog box, and if the log is intended to be viewed on another computer, then in the "Display information" dialog box select the option "Display information for the following languages" and click on the "OK" button.
How to work with event logs:
Event Viewer
If you want to view Application log events, follow these steps:
Select "Windows Logs" in the console tree;
Select the Apps log.
It is advisable to review the System and Application event logs and examine any problems and warnings. Selecting a log displays the available events in the middle window.
The Viewport pane will display basic event data on the General tab, and additional data will be displayed on the Details tab. You can turn this panel on and off by selecting the "View" menu and the "View Area" command.
It is recommended for critical systems to keep logs for the last months.
As a rule, it is inconvenient to assign such a size to journals so that all the information fits in them, as a rule, this problem can be solved in another way. You can export logs to files that are located in a specified folder. To save the selected log, follow these steps:
In the console tree, select the event log to save;
Select the "Save events as" command from the "Action" menu or select the "Save all events as" command from the log menu;
In the "Save As" dialog, select the folder where the file should be saved. If the file needs to be saved in a new folder, then it can be created from this dialog using the context menu or the "New Folder" button on the action bar. In the "File type" field, select the desired file format from the suggested ones: event files - *.evtx, tab-separated text - *.txt,
xml file - *.xml,
csv separated by commas - *.csv. Enter a name in the "File Name" field and click the "Save" button. To cancel saving, click on "Cancel"; In the event that the event log is not intended to be viewed on another computer, in the "Display Information" dialog box, leave the option "Do not display information" set by default, and if the log is intended to be viewed on another computer, then in the "Display Information" dialog box Select "Display information for the following languages" and click OK.
Clearing the event log
Select the event log in the console tree to be cleared; Clear the log in one of the following ways:
From the "Action" menu, select "Clear Log"
On the selected log, right-click to open the context menu. In the context menu, select the command "Clear log"
Next, you can clear the log or archive it if this has not been done before:
If the event log is cleared without saving, click on the "Clear" button;
To clear the event log after saving it, click on "Save and clear". In the "Save As" dialog, select the folder where the file should be saved. If you want to save a file in a new folder, you can create it from this dialog using the context menu or the "New Folder" button on the action bar. Enter a name in the File Name field and click Save. To cancel the save, press "Cancel". Phew, everything seems to be fine, but if it's not clear, then I'm waiting for your comments.
That's all and see you soon....
The seventh version of the Windows operating system implements the function of tracking important events that occur in the operation of system programs. At Microsoft, the term "events" refers to any occurrences in the system that are recorded in a special log and signal themselves to users or administrators. This could be a utility that doesn't want to run, apps that crash, or devices that don't install correctly. All incidents registers and saves the Windows 7 event log. It also arranges and shows all actions in chronological order, helps to perform system control, ensures the security of the operating system, corrects errors and diagnoses the entire system.
You should review this log periodically for new information and configure the system to save important data.
Windows 7 - programs
The Event Viewer computer application is the main part of the Microsoft utility utilities that are designed to monitor and view the event log. This is a necessary tool for monitoring the health of the system and eliminating errors that appear. The Windows utility that manages incident documentation is called the Event Log. If this service is running, then it starts collecting and logging all important data in its archive. The Windows 7 event log allows you to do the following:
Viewing data recorded in the archive;
Using various event filters and saving them for further use in system settings;
Creating a subscription for specific incidents and managing them;
Assign specific actions when any events occur.
How to open the Windows 7 event log?
The program responsible for registering incidents is launched as follows:
1. The menu is activated by pressing the "Start" button in the lower left corner of the monitor, then the "Control Panel" opens. In the list of controls, select "Administration" and already in this submenu click on "Event Viewer".
2. There is another way to view the Windows 7 event log. To do this, go to the Start menu, type mmc in the search box and send a file search request. Next, the MMC table will open, where you need to select a paragraph indicating the addition and removal of snap-ins. Then the Event Viewer is added to the main window.
What is the described application?
In Windows 7 and Vista operating systems, two types of event logs are installed: system archives and service application log. The first option is used to capture system-wide incidents that are related to the performance of various applications, startup and security. The second option is responsible for recording the events of their work. To control and manage all data, the "Event Log" service uses the "View" tab, which is divided into the following items:
Application - events that are associated with a particular program are stored here. For example, mail services store in this place the history of information transfer, various events in mailboxes, and so on.
The "Security" item saves all data related to logging in and out of the system, using administrative features and accessing resources.
Installation - This Windows 7 event log records data that occurs during the installation and configuration of the system and its applications.
System - captures all OS events, such as a failure to start service applications or when installing and updating device drivers, various messages related to the operation of the entire system.
Forwarded events - if this item is configured, then it stores information that comes from other servers.
Other sub-items of the main menu
Also in the "Administration" menu, where the event log in Windows 7 is located, there are such additional items:
Internet Explorer - events that occur during the operation and configuration of the browser of the same name are registered here.
Windows PowerShell - Incidents related to the use of the PowerShell shell are recorded in this folder.
Hardware Events - if this item is configured, then the data generated by devices is logged.
The entire structure of the "seven", which provides a record of all events, is based on the type of "Vista" on XML. But to use the event log program in Window 7, you don't need to know how to use this code. The Event Viewer application will do everything by itself, providing a convenient and simple table with menu items.
Incident Characteristics
A user who wants to know how to view the Windows 7 event log must also understand the characteristics of the data that he wants to view. After all, there are various properties of certain incidents described in the Event Viewer. These features will be discussed below:
Sources - a program that captures events in the log. The names of the applications or drivers that affected a particular incident are recorded here.
Event code - a set of numbers that determine the type of incident. This event source code and name is used by system software technical support to fix bugs and troubleshoot software failures.
Level - the degree of importance of the event. The system event log has six levels of incidents:
1. Message.
2. Caution.
3. Mistake.
4. Dangerous mistake.
5. Monitoring of successful error correction operations.
6. Audit of unsuccessful actions.
Users - captures the data of the accounts on behalf of which the incident occurred. These can be the names of various services, as well as real users.
Date and time - records the timing of the occurrence of the event.
There are many other events that occur during the operation of the operating system. All incidents are displayed in the "Event Viewer" with a description of all related information data.
How to work with the event log?
A very important point in protecting the system from crashes and freezes is to periodically review the "Application" log, which records information about incidents, recent actions with a particular program, and also provides a choice of available operations.
Going into the Windows 7 event log, in the "Application" submenu, you can see a list of all programs that caused various negative events in the system, the time and date of their appearance, the source, and the degree of problem.
User responses to events
After learning how to open the Windows 7 event log and how to use it, you should further learn how to apply with this useful Task Scheduler application. To do this, right-click on any incident and select the menu for linking a task to an event in the window that opens. The next time such an incident occurs in the system, the operating system will automatically launch the installed task to process the error and fix it.
An error in the log is not a reason to panic
If, while viewing the Windows 7 system event log, you see intermittent system errors or warnings, then you should not worry and panic about this. Even with a perfectly working computer, various errors and failures can be recorded, most of which do not pose a serious threat to the health of the PC.
The application described by us was created in order to make it easier for the system administrator to control computers and troubleshoot emerging problems.
Conclusion
Based on the foregoing, it becomes clear that the event log is a way that allows programs and the system to record and save all events on a computer in one place. This log stores all operational errors, messages, and warnings from system applications.
Where is the event log located in Windows 7, how to open it, how to use it, how to fix errors that have appeared - we learned all this from this article. But many will ask: “Why do we need this, we are not system administrators, not programmers, but ordinary users who, as it were, do not need this knowledge?” But this approach is wrong. After all, when a person gets sick with something, before going to the doctor, he tries to cure himself in one way or another. And many often do. Similarly, a computer, which is a digital organism, can “get sick”, and this article shows one of the ways how to diagnose the cause of such a “disease”, based on the results of such an “examination”, you can make the right decision about the methods of subsequent “treatment”.
So the information about the way to view events will be useful not only to the system engineer, but also to an ordinary user.
