Short list of what the Event IDs are, (pertaining to startup/shutdown):


Event ID Event Type Event Source Event
1 INFORMATION Power-Troubleshooter The system has resumed from Sleep
12 INFORMATION Kernel-General The operating system started at system time
13 INFORMATION Kernel-General The operating system is shutting down at system time
41 CRITICAL Kernel-Power The system has rebooted without cleanly shutting down first.
42 INFORMATION Kernel-Power The system is entering sleep.
109 INFORMATION Kernel-Power The kernel power manager has initiated a shutdown transition.
1073 WARNING USER32 The attempt by user <user> to restart/shutdown computer <computername> failed
1074 INFORMATION USER32 The process <processname> has initiated the power off of computer <computername> on behalf of user <user> for the following reason: …
6008 ERROR EventLog The previous system shutdown at <time> on ‎<date> was unexpected.
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: