How to check server shutdown logs?

How to Check Server Shutdown Logs?

You can utilize Event Viewer to see the date, time, and client subtleties of all shutdown events brought about by a shutdown (power off) or restart.

The event ID's beneath will show you these subtleties Event ID & Description - 

41 & The system has rebooted without neatly closing down first. This blunder could be caused if the system quit reacting, smashed, or lost force startlingly.

1074 & Logged when an application (ex: Windows Update) makes the system restart, or when a client starts a restart or shutdown.

6006 & Logged as a spotless shutdown. It gives the message "The Event log administration was halted".

6008 & Logged as a grimy shutdown. It gives the message "The past system shutdown at time on date was unforeseen". 

This instructional exercise will tell you the best way to see the date, time, and client subtleties of all shutdown and restart event signs in Windows 7, Windows 8, and Windows 10.

Here's How: 

1 - Press the Win + R keys to open Run, type eventvwr.msc into Run, and click/tap on OK to open Event Viewer.

2 - In the left sheet of Event Viewer, open Windows Logs and System, right click or press and hang on System, and click/tap on Filter Current Log. (see screen capture beneath).

In the event that you have just sifted this log, click/tap on Clear Filter first and afterward click/tap on Filter Current Log to begin once again new.

3 - Enter the event ID's underneath into the <All Event IDs> field, and click/tap on OK. (see screen capture underneath) 41, 1074, 6006, 6008.

4 - You would now be able to see the subtleties of these shutdown event logs separated by these event IDs. (see screen captures underneath).

5 - When completed the process of review log subtleties, you can close Event Viewer on the off chance that you like.

On the off chance that you are interested to know why your PC shut down and what happened precisely during the shutdown, 

you will be glad to realize that Windows can find the shut procedure and compose various events in the system log. In this article, we will perceive how to discover them. 

As the OS is utilizing the default log group, all the events identified with the shutdown can be seen with the implicit Event Viewer device. No other outsider apparatuses are required.

In Windows 10, there are three events associated with shut down and restart.

Event ID 1074 - Indicates that the shutdown procedure was started by an application. For instance, it tends to be Windows Update.

Event ID 6006 - The clean closed down event. This implies Windows 10 was killed effectively.

Event ID 6008 - Indicates a filthy/inappropriate shutdown. Shows up in the log when the past shutdown was unforeseen, for example because of intensity misfortune or BSoD (Bug check).

Here is the way to discover these events:

To discover the Shutdown sign in Windows 10, do the accompanying.

1. Press the Win + R keys together on the console to open the Run exchange, type eventvwr.msc, and press the Enter key.

2. In Event Viewer, select Windows Logs - > System on the left.

3. On the right, click on the connection Filter Current Log.

4. Click OK to channel the event log.

Presently, the Event Viewer will show just events identified with shut down.

Note: The working system can naturally return applications which were running before shutdown or restart. 

This conduct is absolutely startling for most Windows clients who moved up to the ongoing arrival of the OS. 

To maintain a strategic distance from this issue, you can include a unique "Shut Down" setting menu to the Desktop that reestablishes the great conduct.