Create a Custom View in Event Viewer to show Reboot Events

Scenario

A server reboot can explain related events and alarms triggered by monitoring systems, so it’s always handy to check for reboots first when troubleshooting.

With this in mind, you want a quick and easy way of finding out when the server last rebooted.

Solution

You need to create a Custom View in Event Viewer, that will only show shutdown and startup events, including reasons why the server rebooted.

Here’s the steps to create the Custom View:

[Read more…]

Event Log Error Event ID 23 in Windows Server 2008

Have you ever experienced a stream of Event Log errors using Windows Server 2008?
I have, and they’re really annoying.¬†They typically look like this:

The event logging service encountered an error (res=5) while initializing logging resources for channel PowerShell.

[Read more…]