Windows Server® 2008 Administrator's Pocket Consultant

Event Logging and Viewing

Event logs provide historical information that can help you track down system and security problems. The Windows Event Log service controls whether events are tracked on Windows Server 2008 systems. When you start this service, you can track user actions and resource usage events through the event logs. Two general types of log files are used:

• Windows Logs. Logs that the operating system uses to record general system events related to applications, security, setup, and system components.

• Applications And Services Logs. Logs that specific applications and services use to record application-specific or service-specific events.

Windows logs you’ll see include:

• Application. This log records events logged by applications, such ...