System information
2.2.4 Windows NT Event Viewer
All events from Windows NT system and subsystems are logged in three log
files:
•
System log
•
Security log
•
Application log
The Windows NT Event Viewer is the tool to format and read these logs. They
can be from the local system or from a remote system through the network.
This is the first place to check if you have any problems with the system. The
entries are either Information (blue), Warnings (yellow) or Errors (red).
To see the entries in the logs do following:
•
Open the Event Viewer.
•
Select Log and choose one of the logs (System, Security or Application).
•
Select one entry and press enter or double-click on the entry to see the
details.
The logs can be saved to a file and later be reviewed. By default, the entries will
be kept for seven days or until the log file reaches a certain length. To adjust
these settings, select Log and choose Log Settings. The values can be set for
each log file individually.
Figure 82. Windows NT Event Viewer - Detail View
Chapter 2. NT Systems Management Functions 59