Logging Events

Logging Events

Some operating systems, such as Windows NT, have the capability to keep a running log of system events. That log serves as a record of previous errors, warnings, and other messages from the system. Studying the event log can help you find reccurring errors and discover when a problem first appeared.

Windows NT’s Event Viewer application provides you with access to the event log. You can use Event Viewer to monitor the following types of events:

System events. Warnings, error messages, and other notices describing significant system events. Examples of system log entries include browser elections, service failures, and network connection failures.
Security events. Events tracked through Windows NT’s auditing features. Refer to Chapter 8, “Managing and Securing a Microsoft Network.”
Application events. Messages from Win32 applications. If you’re having a problem with an application, you can check the application log for an application-related error or warning messages.

Event Viewer is part of the Windows NT Server Administrative Tools group. To start Event Viewer, click on the Start button and choose Programs, Administrative Tools, Event Viewer. Figure 12.2 shows the Event Viewer main screen. Click on the Log menu to select the System, Security, or Application log.

If you double-click on a log entry in Event Viewer, an Event Detail dialog box will appear on your screen (see Figure 12.3). An Event Detail provides detailed description of the event.