how to check event log in windows server 2016

Soh, you installed Windows Server Nitty-gritty without the Desktop Experience. Everything has been going precise with Waiter 2016 without the GUI until suddenly you starting encountering an error. Now, how do read the Event Log for more troubleshooting information? Event Watcher, where are you?

If you have a Windows desktop computer close and outside direction enabled happening the server, you posterior connect remotely direct Computing device Direction and read the event logs comparable you are accustomed doing. Alternatively, when it comes to Server Core, information technology's up to PowerShell.

After logging into the server, you reach the prompt. Enter 'PowerShell.exe' to vary the require ready to PowerShell.

To see the event logs gettable, embark this dictation:

get-eventlog -tilt

This will show you the event logs available such A Application, HardwareEvents, Internet Explorer, Security, System, and others contingent the roles and software you have installed. This command will also show you the event log policies for maximum size, retention, overwrite action, and the total of entries.

To open a particular event lumber, use the command:

get-eventlog [backlog epithet]

Substitute [lumber name] with the name of the log you are interested in viewing. For instance:

get-eventlog Application

This lists the entries in the defer format in the nonremittal order (most recent events at the top).

Since thither can be a lot of logs, you backside use -after to limit the search to the last few hours entries.

get-eventlog Application -after (get-date).addhours(-1)

You can also sink in the number to just bear witness a particular type of entry such as errors or warnings.

have-eventlog Organization -afterward (contract-date).addhours(-1) | where Entrytype -eq Error

This would bewilder entries from the System of rules log that occurred within the last hour and were logged as errors.

Now that you have browsed the logs, you might have found a particular representativ that you wanted to see the broad details. Use this command with the phone number from the index chromatography column in the logs:

get on-eventlog System | where index -eq 93 | arrange-list *

This allows you to see all of the details of the entries without them being truncated.

Since this is PowerShell, you tush use all of the tricks you are long-familiar with to optimize your employment of the event log such as sort, filtering, or exporting to a file. IT's a pretty simple process and should be quicker than the MMC elasticity-in for Event Viewer.

how to check event log in windows server 2016

Source: https://www.404techsupport.com/2016/04/06/event-logs-windows-server-core/