Event Viewer in Windows XP

[thenewsusieq]

Please help me. I am non-technical & so need answers in plain English please! I am looking for explanations of what the following actually mean when seen in Event Viewer.

1) Under the heading "Source" - tcpip (when I go into Microsoft help it repeats this with a long string of numbers after it, which doesn't leave me much wiser)

2) Under the heading "Event" - 7035; 7036; 6009; 6005; 4; 15.

3) Under the heading "User", as well as my name appearing, there is almost always, simultaneously or almost simultaneously, a parallell event with the user described as N/A.

Where I could I have tried expanding and going to help. Grateful for any advice. Many thanks.

[Dusty]

Welcome to the CH forums.

Most of the entries in event logs are for info only as to what is started and stopped and when this occurs.  The info is used to detail what the state of the system was when a major event occurred.

I think this is what you're looking at:
Click on the thumbnail to view larger image.

The above is the Application Programs Event Log window, the others which could be displayed cover IE, Security and the System.

So very roughly:
1.  Source is the activity which caused the event to be logged.

2.  Event (number) is a number to identify the type of event e.g. different services starting/stopping normally could have the same number allocated.

3.  User shows the user account name from which the event source entry is triggered.  N/A would show when the event has a global affect i.e. it affects all users.

At the top of my Event Log image (above) you will note an Error entry.  Clicking on this entry shows the Event Properties window (see the image below) which gives further details of the Event:
Click on the thumbnail to view a larger image.

In this case I know that the program FoxitReader.exe has failed for some reason which could be investigated using the information displayed..

I hope this is of some help.

Good luck


 

[thenewsusieq]

Thanks Dusty.

Is there any chance you (or someone else can give me more specific answers to what the "event" numbers actually are - it strikes me they must be standard codes but I would like to know if possible. by the way this a Home Office Networked system with one other computer on it.

Thanks and rgds

S

[Dusty]

Ok, I'll try.   The Event number is a number allocated to that event, or even to that event type.  As you say it is a standard number used to identify that event or event type.

As you will see in the images at this site clicking on an event in the Event Viewer windows brings up an Event Properties window which refers to that event (you can see that the Event ID matches the Event number  - in this case 36).

The bottom two lines in the Event Properties Description pane give the opportunity to get further information using the Help & Support Centre at Microsoft (url).  If you click on that, information including the Event Number is sent to MS, a search is made for info on that type of event, and that info is displayed.  I have done this with one of my Event Log entries - see the attachment below.

Send one of your events to MS and see if any further info is available.  Scroll down to see what action you should take, probably none as in this..  Note that the Event ID 1517 shows here too.

So, to summarise, the Event Number is used by the online MS Help & Support Centre to identify the event, or event type, and provide further info.

I don't know if a complete on-line list of event numbers and information is available but there's a lot of them, the highest number in my Application Event Log is 11729.

Hope this helps.

Good luck.



[recovering space - attachment deleted by admin]

[Spoiler]

You can check this site out....

http://www.eventid.net/