Lesson 2: Troubleshooting Reliability Issues by Using Built-in Diagnostic Tools

561

Custom Views

You can create custom views by clicking Create Custom View in the Event Viewer Action

menu, specifying the source logs or events and filtering by level, time logged, event identity

(ID), task category, keywords, user, or computer. You are unlikely to specify all of these criteria,

but this facility enables you to refine your search to where you think a problem might be occur-

ring rather than searching through a very large number of events. Figure 11-16 shows a custom

view specification.

Figure 11-16

Specifying a custom view

Windows Vista provides the Administrative Events custom view by default. This view contains

critical, error, and warning events from all administrative logs.

Applications and Services Logs

Event Viewer provides a number of Applications and Services logs. These include logs for

programs that run on the computer and detailed logs that store information about specific

Windows services. For example, these logs can include the following:

■

Distributed file system (DFS) replication log

■

Encrypted file system (EFS) debug log

■

Function discovery provider host service tracing log

■

Hardware events log

■

Internet Explorer log