Accessing and reading Windows log files and event viewer

You may also like...

7 Responses

  1. yann says:


    How can i log who accesses to the eventviewer ? say, user 1 open eventviewer to see a particular logs (security, app, systel,..) and i want an eventid to be generated in the eventlog that says user 1 has accesses to the eventlog.
    I try to enable audit on privilege success and put sacl in system drive:\Windows\System32\Winevt\Logs but all i have is users1 open mmc.exe instaead of eventviwer.exe.

    os: windows 2008 R2

    • Thom says:

      I don’t have Win 2008 R2, only worked with 2003. Anyway, I never needed user event viewer access logs. You should ask this kind of question in 2008 server forums.

  2. Simon Jivkov says:

    In which .log, if any, I could find info regarding the reasons for freezing of XP, going to standby?
    Thanks in advance.

  3. Karthick says:

    Anyone knows about sorting techniques which used on event viewer log??

  4. Anyone know how to correct message (problem): “Two IP addresses found” indicating there is another computer with same IP number. There is only one PC here.

    • Thom says:

      You have to provide more info on this issue. If you are on some kind of WIFI network, then maybe DHCP server issued one more identical IP address by mistake…

Leave a Reply

Your email address will not be published. Required fields are marked *