March 10, 2015

Track system Startup, Shutdown, Uptime and much more using Windows logs Event ID’s

The following Event ID’s in the System log are nice to know for various debugging scenarios on the client computers.

1074 – Information about program or user that initiated restart/shutdown

6005 – Startup time

6006 – Shutdown time

6013 – System uptime

Using the “Filter Current Log” feature allows you to search for occurences of the events you want to dig into.