Scenario
A server reboot can explain related events and alarms triggered by monitoring systems, so it’s always handy to check for reboots first when troubleshooting.
With this in mind, you want a quick and easy way of finding out when the server last rebooted.
Solution
You need to create a Custom View in Event Viewer, that will only show shutdown and startup events, including reasons why the server rebooted.
Here’s the steps to create the Custom View:
- Open Server Manager > Diagnostics >Event Viewer > Custom Views
- Right-click Custom Views and select Create Custom View:
- Select System for the Event log, enter “12,13,22 (edit: and 1074,1076)” for the Event IDs, then click OK:
- Enter a name (Reboot Events) and description (Shows shutdown/startup/reboot-reason events) for your Custom View, then click OK to save:
- Your Custom View will now appear:
- When you select the Custom View, only events with IDs of 12, 13, 22 and 1074 will be shown:
- Here’s some examples of the events:
- Although this only takes a minute to create, you might consider exporting the view, ready to import into another server:
- Job done!
[…] this link (Create a Custom View in Event Viewer to show Reboot […]