2.5.1.2 Viewing Windows Server Event Log Entries

To view Windows Server Event Log entries, follow these steps:

1. From the Windows Server desktop, select Start → Programs → Administrative Tools `→ Event Viewer to display a list of all the events that have occurred since the application booted.

   Figure 2-6 Event Viewer Window

   
2. On the menu bar (across the top of the Event Viewer window), click Log to display a drop-down Log menu.
3. From the drop-down Log menu, choose Application. As a result of this selection, only application-specific events are listed in the Event Viewer window.
4. For detailed information on Event Details, refer to in the Detail tab.

   Figure 2-7 Event Detail Window

   
   This General tab provides the following information:

   • Log Name—indicates where the event was recorded.
   • Source—section of System Messages in which the event is described and an appropriate action is recommended.
   • Event ID—number under which the message is listed in System Messages.
   • Level—purpose of the message; specifically, whether the message is intended to provide information, a warning, or notification of an error.
   • User—person using the software at the time the event occurred.
   • OpCode—provides additional context about what action or operation was performed when the event was logged.
   • Logged—date and time on which the event occurred.
   • Task Category—provides additional classification for an event.
   • Keywords—filter and categorize events based on predefined tags.
   • Computer—machine on which the event occurred.