Examining Applications and Services Logs
Since the first version of Windows NT in 1993, anytime anything happens on a Windows, the component responsible writes details to an event log. In the earlier versions of Windows Server, there were four different Windows logs:
- Application - holds events related to software you have installed on the server
- Security - holds events related to the security of your server
- Setup - holds events related to Knowledge Base (KB) installation and events that occurred during installation activities
- System - holds events that relate to this system, such as system start and system shut down.
In addition to these logs, other applications and features can add additional logs. You can see the classic and additional logs using the Windows Powershell Get-Eventlog cmdlet.
With Window Vista, Microsoft significantly improved the event logging features, including adding the Applications and Services Logs. This provides you with more than four hundred individual logs...
