https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977502#M10666 Hi,<BR />is there a log file in Windows where I can see the shutdown/restart of the server?<BR />TIA,<BR />Art Fri, 05 May 2006 09:45:21 GMT Arturo Galbiati 2006-05-05T09:45:21Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977502#M10666 Hi,<BR />is there a log file in Windows where I can see the shutdown/restart of the server?<BR />TIA,<BR />Art Fri, 05 May 2006 09:45:21 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977502#M10666 Arturo Galbiati 2006-05-05T09:45:21Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977503#M10667 Hi Arturo,<BR /><BR />Assuming I'm understanding your question correctly, "System" under Event Viewer should allow to you discover when your system started up or shut down. The actual file is generally located somewhere like C:\WINDOWS\system32\config\SysEvent.Evt, but you probably won't be able to access it directly since the file is locked during a Windows session.<BR /><BR />Typically you'll see something like "Microsoft(R) Windows 2000 (R) Service Pack 4 Uniprocessor Free." (example is from a Win2k system), and this is listed under the Source column as "eventlog".<BR /><BR />Under normal circumstances when the system shuts down you will usually see another "eventlog" listed saying "The Event log service was stopped", indicating the system has initiated a shutdown.<BR /><BR />Bryan Fri, 05 May 2006 10:05:14 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977503#M10667 Bryan Eley 2006-05-05T10:05:14Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977504#M10668 In the system event log you will get an entry for every restart of the server:<BR /><BR />Source: eventlog<BR />ID: 6006<BR />Description: The event log service has ben stopped.<BR /><BR />Source: eventlog<BR />ID: 6005<BR />Description: The event log service has ben started. Fri, 05 May 2006 10:05:52 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977504#M10668 Ivan Ferreira 2006-05-05T10:05:52Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977505#M10669 Thanks, Ivan. I should have specified the event log ID for simpler browsing. My excuse was that my Computer Management window was sized too small to show the column. ;-) <BR /><BR />Bryan Fri, 05 May 2006 10:13:53 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977505#M10669 Bryan Eley 2006-05-05T10:13:53Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977506#M10670 Ivan reply is fine Fri, 05 May 2006 10:17:25 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977506#M10670 Arturo Galbiati 2006-05-05T10:17:25Z https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977507#M10671 hi Ivan<BR />thanks for reply.<BR /><BR />But Is there any loopwhole in your trick.<BR /><BR />Event log service may be stopped manually or by any other process other than RESTART Process.<BR /><BR /><BR />Your Fast Reply in this regard will be highly appriciated<BR /><BR />Thanks<BR /><BR />Divesh K. Jain Thu, 15 Jun 2006 05:29:28 GMT https://community.hpe.com/t5/operating-system-microsoft/is-there-a-log-file-for-shutdown-restart/m-p/4977507#M10671 divesh4u 2006-06-15T05:29:28Z