Question

Locate the log files on any device or application you have permissions to use. This could be your personal computer, a lab VM, your home WiFi router, or an application running on your computer.

Go through the log files and find five different events that have been logged that you are unsure about what they mean. This could be a system event, an access request audit, or an error. Use a little GoogleFu and try and determine what caused the logged event. Post the information from each logged event with your explanation of event from what you found on the Internets.

Answer 1

1. Event ID : 7001

This Event occurs if we change the version of the operationg system. for example if we upgrade windows 7 to windows 10, certain services may not work properly or certain adapters maynot work and this event occurs showing the error that "service cannot be started".

2. Event ID : 27

When the network link in our system is disconnected, this event occurs. When this event occurs, the network icon in taskbar will be shown with a cross mark , displaying a message "network cable is plugged out". if this occurs frequently try updating the network adapter.

3. Event ID : 32

When a network connection is established in our system, event with id 32 occurs. we often see this event after the event 27 has occured.When this event occurs, it shows a message "network link has been established".

4. Event ID : 137

The system goes to sleep mode even if choose it to "never sleep". This event can reduce the performance of the system. This may occur due to certain firmware.

5. Event ID : 10010

This is a system event saying that certain app is not registered with DCOM within the required time. in my system i tried opening PgAdmin buit it showed the error that "Server couldnot be connected". It is this Event which displays the before said message. sometimes we may need to remove the apploication which is causing this error. But ceratin apps works properly while reopening it.