Question

Viewing Logs Using the Microsoft Windows Event Viewer

In this project, you view logs on a Microsoft Windows computer.

1. 1

   Launch Event Viewer by clicking Start and then type Administrative Tools in the Search programs and files box.

2. 2

   Click the Administrative Tools folder and then double-click Event Viewer.

3. 3

   The Event Viewer opens to the Overview and Summary page that displays all events from all Windows logs on the system. The total number of events for each type that have occurred is displayed along with the number of events of each type that have occurred over the last seven days, the last 24 hours, or the last hour. Click the > sign under each type of event in the Summary of Administrative Events to view events that have occurred on this system.

4. 4

   Select a specific event and then double-click it to display detailed information on the event. Is this information in a format that a custodian could use when examining a system? Is it in a format that an enduser would find helpful?

5. 5

   When finished, click the Back arrow to return to the Overview and Summary page.

6. 6

   In the left pane under Event Viewer (Local), double-click Windows Logs to display the default generated logs, if necessary.

7. 7

   Double-click Security.

8. 8

   Select a specific event and then double-click it to display detailed information on the event. When finished, click Close and the Back arrow to return to the Overview and Summary page.

9. 9

   In the left pane under Event Viewer (Local), double-click Applications and Services Logs to display the default generated logs, if necessary.

10. 10

    Select a specific event and double-click it to display detailed information on the event. When finished, clickClose and then double-click Event Viewer (Local) in the left pane. Leave this window open for the next project.

11. please take screenshots of all the steps and answer all the questions.

Answer 1

1.

2.

3.

a.Summary of administrative Events

b.Recently Viewed Nodes

  c.Log summary

4.

Yes this format clearly state the level of the event occurred(whether it is critical,error,warning etc.) and also gives the exact time when the event occurred. It also provide information about the source of event. Every event has its own unique event ID. this ID is also provided in this format and hence it is easier for any enduser to understand.

5. Same as the 2nd screenshot

6.

7.

8.

9.

10.