Obtaining Windows Event logs for diagnostics and troubleshooting

Jun 29, 2006


Issue:

You want to know how to obtain Windows Event logs for diagnostics and troubleshooting.

Solution:

Event logs are often requested by support professionals to diagnose and troubleshoot software problems, such as crashes, errors or other unexpected behaviors.

To obtain the Windows Event logs:

In Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows Vista

  1. On the Start menu (Windows), click Control Panel.
  2. In Control Panel, double-click Administrative Tools.
  3. In Administrative Tools, double-click Event Viewer.
  4. In the Event Viewer, expand "Windows Logs" (on the left pane).
  5. Right-click Application and click Save All Events As.
  6. In the Save As dialog box, make sure that the file type is set to Event Files (*.evt).
  7. Name the log file "Application" and click Save.
  8. Repeat steps 5-7 to obtain the System and Security logs.


In Windows XP or Windows 2000

  1. On the Start menu (Windows), click Settings > Control Panel.
  2. In Control Panel, double-click Administrative Tools.
  3. In Administrative Tools, double-click Event Viewer.
  4. In the Event Viewer dialog box, right-click Application and click Save Log File As.
  5. In the Save Application As dialog box, make sure that the file type is set to Event Log (*.evt).
  6. Name the log file, "Application" and click Save.
  7. Repeat steps 4-6 to obtain the System and Security logs.

See Also:

Event Viewer How To... (Technet link Applies To: Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows Vista)
Open Event Viewer (Microsoft link Applies To: Windows 7)
Archive an Event Log (Technet link Applies To: Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows Vista)

Products:

AutoCAD;AutoCAD LT;AutoCAD Revit Architecture Suite;AutoCAD Revit MEP Suite;AutoCAD Revit Structure Suite;Building Design Suite;Revit;Revit Architecture;Revit MEP;Revit Structure;AutoCAD Revit LT Suite;Revit LT

Versions:

2004;2005;2006;2007;2008;2009;2010;2011;2012;2013;2014;2015

Discuss