Questions and answers

What is the shutdown event ID?

What is the shutdown event ID?

Event ID 1074: System has been shutdown by a process/user. This event is written when an application causes the system to restart, or when the user initiates a restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down.

How do I find out who shutdown a server?

Answers

  1. Go to event Viewer.
  2. Right click on system and -> Filter Current Log.
  3. For User Shutdowns, click downward arrow of Event Sources -> Check User32.
  4. In type 1074 -> OK.

How do I know if my server is unexpected shutdown?

Here’s How:

  1. Press the Win + R keys to open Run, type eventvwr.
  2. In the left pane of Event Viewer, open Windows Logs and System, right click or press and hold on System, and click/tap on Filter Current Log. (
  3. Enter the event ID’s below into the field, and click/tap on OK. (

How do I fix Event ID 1001?

Reinstall the Problematic Program. Identify the app or program causing the Event ID 1001 error and uninstall it. Then restart your computer and download a fresh copy of the problematic app. If the respective app or program got corrupted, reinstall it should fix the problem.

What causes Event ID 1001?

The Event ID 1001 error is usually caused by hardware failure, application errors, malware, and Blue Screen of Death errors. Some of the most common root causes for these problems include high CPU and RAM usage, overheating issues, app compatibility issues, or running resource-demanding programs on low-end devices.

What does event ID 6008 unexpected reboot mean?

It reboots unexpectedly, throwing a Event Id 6008 to the event log (“Unexpected Shutdown”). The issue started yesterday and has rebooted about 10 times yesterday and continued to do it through today. There are no other events or errors that are logged in the event log just before the 6008 event. We haven’t changed anything with the hardware.

What is event ID 6008 for Dell PowerEdge 2850?

I am experiencing a problem with one of my servers – DELL PowerEdge 2850. It reboots unexpectedly, throwing a Event Id 6008 to the event log (“Unexpected Shutdown”). The issue started yesterday and has rebooted about 10 times yesterday and continued to do it through today.

How to check unexpectedly shut down on Windows?

When the Windows system shuts down unexpectedly, the Windows system creates a Event which is ID 6008 in System Log. The event provides the date and time for last unexpected shut down. To check the boot up time of the system, you can perform “systeminfo” at “Command Prompt”.

What is event ID for Windows Server 2003?

Windows 2003 x86 SP2 installed on Dell Poweredge 6850. Server rebooted the other day with event id 6008; The previous system shutdown at 12:11:59 PM on 29/11/2012 was unexpected. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.