What to use for computer logs How to look at computer logs

Through the logs, experts can check whether the computer has been hacked.

It's like the police can solve a crime through clues.

How to look at the computer logs, please see me to explain.

For work, in addition to her Mac laptop, Wendy also has a Windows desktop. It's okay to carry a laptop with you, but lately, I always feel that every time I go to work, I turn on my Windows desktop and I don't have the same as when I left the day before! But it's not too good to ask everywhere, so you have to check it yourself.

Fortunately, it's not difficult, if you happen to have this kind of doubt, hurry up and practice it with me! Let's see if anyone has sneaked into our computer.

Body:We all know that any activity on a computer leaves a trace, which is why we can conduct computer forensics. Today, I will share with you a simple method to show you how to check the login status of your computer.

1.Right-click "My Computer", select Manage, and open the Event Viewer; Or press the Windows key + R keys at the same time and type "Open the Event Viewer directly."

2.In the Event Viewer window,Computer logs, select "Security", and the login log will be displayed.

3.Next you'll see a list in the window, including Keyword, Date & Time, **, Event ID, Task Category.

Whenever a user performs something, the audit log records an audit entry, and we can audit both successful and failed attempts in the action.

Security audits are extremely important for any enterprise system, as audit logs record whether a security breach has occurred. If an intrusion is detected, the audit log generated by the correct audit settings can contain important information about the intrusion.

We can see that the taskbar shows a lot of time-related information: login time, logout time, and other details.

4.Filter for Event ID. There are filters in the right column of the window, and we can filter the logging records purposefully according to our situation.

In my case, the event ID that needs to be filtered is "4624", and this ID indicates a successful login.

In the log, different login situations have different event ID numbers, such as "4672" indicates that there are logins with special permissions, these numbers are specified, you can check them yourself.

5.View the details of a login record.

The computer log records the work of the computer every minute, and we can understand the daily operation of the computer by looking at the computer log. Find out when your computer is starting, shutting down, running times, errors, warnings, and safety information. Understanding the operation of the computer will greatly benefit our maintenance of the computer and improve efficiency.

So how do you check your computer's logs?

Bring up the time viewer.

Click Start to open the Control Panel

In the Control Panel, double-click Administrative Tools

After opening the management tool, double-click the Event Viewer to view the application and the system's health in the viewer.

Check out the app.

On the left side of the event viewer, select "Application", all events will appear at this time, and if you want to find the events you need, you must filter, for example, you want to filter the operation of "office".

Right-click Applications, and then click Properties

In Properties, select the Filter option.

Select the desired event type in the "Event Type" field and tick it in front of it.

The word "Event**" drops down in the checkbox. Select Microsoft Office

In the filter options, you can also freely set the time for querying events.

Click OK to find the run event for Microsoft Office.

Check the system.

On the left side of the event viewer, select "System", all events will appear at this time, and if you want to find the events you need, you also need to filter, such as the operation of the computer startup.

Right-click System, and then click Properties

Select the Filter option.

Select the desired event type in the "Event Type" field and tick it in front of it.

The word "Event**" drops down in the checkbox. Select Eventlog

In the filter options, you can also freely set the time for querying events.

Click OK to find out when your computer started up and when it was shut down.

Use commands to see the current computer running directly.

Click Start and select Run

Enter "cmd" in Run and press Enter.

In cmd, enter "systeminfo" and press enter to bring up the operation of the system.

Timely system operation.

For details, please refer to .

There's a log folder to read, but can you read it?

The function is to record the state of the system (program) operation. Open the Start Menu and click on the Control Panel option in the Start Menu to view it.

1. Network equipment, systems and service procedures will generate an event record called log during operation; Each line of the log contains a description of the date, time, user, and action of the operation.

2. Windows network operating systems are designed with a variety of log files, such as system logs, scheduler service logs, FTP logs, DNS server logs, etc., which vary according to the different services enabled by your system. When we perform some operations on the system, these log files usually record some of the relevant content of our operation of the stool key, which is quite useful for the system security staff.

3. The value of log data for the realization of wild network security depends on two factors: first, your systems and devices must be properly set up to record the data you need. Second, you must have the right tools, training, and resources available to analyze the data collected.

Fourth, it is very simple to view a certain type of log records, the author takes the view of web management logs as an example, click the "web management logs" link, enter the log view page, select the log file to be viewed in the log file list box, and then click the "view logs" button on the right side, you can browse the details of the web management logs.

When there is a running error during the operation of the computer, detailed information will be recorded in the log file, and the next section will introduce how to view the system log.

Method. 1. Find My Computer in File Explorer.

2. Right-click and click Manage.

3. Click Event Viewer.

4. Find the windows log in the submenu and click on it.

5. The right side will display the current overview of the computer.

6. On the left side, you can make a detailed query of a single item, click Application.

7. You can see the running logs of the most recent applications.

8. Click Security to query the login activity.

9. Click Setup to query the startup information.

10. Click on the system to view the system program running information.

1. First find the "My Computer" icon on the computer desktop, right-click and select the "Manage" option.

2. Click Event Viewer in the "Computer Management" dialog box that opens.

3. In the drop-down menu of "Event Viewer", select the item you need to view logs as needed, for example, click "Windows Logs".

4. You can open the page of the log category, and you can double-click to enter the "application".

5. You can see the detailed log, right-click the log, you can view the content of the log in detail.

The volume of computer records will continue to grow, so we should also be aware that we need to clean it up every once in a while. This is done to save storage space on your computer. Some computers have not been recorded by the computer for several years, resulting in the storage of computer logs up to several gigabytes, which not only wastes space but also slows down the computer.

Computer logs are very important, and they are available in XP, Win7, Win8, Win10, and even other operating systems. With the computer log function, once there is a problem with the computer, you can locate the cause of the problem by viewing the logs. Provide us with a good solution to troubleshoot the problem.

1-1: Open any folder on your computer, you can see the icon of [This Computer] in the directory tree on the left, right-click and select the [Manage] item, as shown in the following figure.

Computer Diary Computer**1

1-2: In the pop-up dialog box, System Tools - Event Viewer: All computer records are stored here. Here's how.

Computer diary computer **2

1-3: Continue down to find the windows logs, and we can see the logs of the application and the system.

View Diary PC**3

1-4: If you have a problem with your computer, you can view the specific information, as shown in the following example.

Computer use computer**4

1-5: With the above operations, you should have learned to find the computer to record. The computer system is very powerful, and the log records are also very detailed, and there will basically be clear error messages to facilitate you to solve the problem.

The so-called system security log is that every time the computer is turned on and off, the program is closed, and the system reports an error, this information will be recorded and stored in the log file. Log files accumulate over time, affecting system speed.

Solution: 1. Log in to the system as administrator, click on the control panel, and select management tools.

2. Double-click Event Viewer, where you can see application logs, security logs, and system logs.

3. You can right-click on any kind of log and select Clear All Events, or you can right-click and select "Properties" to set the upper limit of the size of the log, and choose the way to deal with it when the log is full, generally speaking, let it automatically overwrite the old log for a period of time, so that the log will never exceed the specified size.

Right-click on "This Computer" on the desktop and click on the "Manage" option on the pop-up menu. In the Computer Management window, double-click the Event Viewer option. Then double-click the "Windows Logs" option, and finally click the options under Windows Logs, and you can view the corresponding log records.

Tools Raw Materials:

Huawei MateBook 14

windows 10

1. Right-click "This Computer" on the desktop of the computer, and click the "Manage" option on the pop-up menu.

2. In the "Computer Management" window, double-click the "Event Viewer" option.

3. Then double-click on the "Windows Logs" option.

4. Finally, click the option below the windows log, and you can view the corresponding log records.