V
Vineeth Mohanan
Guest
Hi Team,
We are working with Windows 10 Enterprise edition and something we've observed is that the under Diagnostics-Performance Source, EventID 100 & 200 for the Log Name: Microsoft-Windows-Diagnostics-Performance/Operational is being logged.
when and if a user selects Start/Power/Shutdown or if they go to a CMD windows and type shutdown -s, It appears as though the only Diagnostics-Performance EventID 100 ,200 that will log is if the user conducts a restart and we can get the exact shutdown time for that host.
But observed that after clearing the old logs from Event Viewer and by the Start/Power/Restart or CMD shutdown -r will not able to record an EventID 100/200.
I'm wondering if this is an expected behavior OR if I should expect to see an Diagnostics-Performance Event Id 100 ,200 appear as part of a Cold Startup?
These events, if logged as part of a restart and a cold boot, would do the trick.
Can we forcefully create the event log for these events 100/200?
Could you please help me how should I calculate the Shutdown time of the system? With the above event logs i was able to get but due to the inconsistency , every reboot/Shutdown/Cold boot the event log for event Id 100 & 200 details are not recorded.
Waiting for the response.
More...
We are working with Windows 10 Enterprise edition and something we've observed is that the under Diagnostics-Performance Source, EventID 100 & 200 for the Log Name: Microsoft-Windows-Diagnostics-Performance/Operational is being logged.
when and if a user selects Start/Power/Shutdown or if they go to a CMD windows and type shutdown -s, It appears as though the only Diagnostics-Performance EventID 100 ,200 that will log is if the user conducts a restart and we can get the exact shutdown time for that host.
But observed that after clearing the old logs from Event Viewer and by the Start/Power/Restart or CMD shutdown -r will not able to record an EventID 100/200.
I'm wondering if this is an expected behavior OR if I should expect to see an Diagnostics-Performance Event Id 100 ,200 appear as part of a Cold Startup?
These events, if logged as part of a restart and a cold boot, would do the trick.
Can we forcefully create the event log for these events 100/200?
Could you please help me how should I calculate the Shutdown time of the system? With the above event logs i was able to get but due to the inconsistency , every reboot/Shutdown/Cold boot the event log for event Id 100 & 200 details are not recorded.
Waiting for the response.
More...