--- title: 'How to view shutdown and restart logs in Windows Server | Zomro' description: 'The Windows Event Viewer is handled by the main event log service. The Event Viewer records the history of server startup and shutdown.' image: 'https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661987063_1.png' --- ![opened image]() * [Zomro](https://zomro.com/) * [FAQ](https://zomro.com/blog/faq/) * How to view shutdown and restart logs in Windows Server # How to view shutdown and restart logs in Windows Server 25-08-2022 The Windows Event Viewer is managed by the main event log service. The Event Viewer records the history of server startup and shutdown. It also tracks the actions of each user while the device is in operation. It logs errors, and other messages and warnings that occur on Windows Server. In this article, we will learn how to check shutdown/reboot logs on Windows 2012, 2016, and 2019 VPS servers. Let's look at some of the most common codes related to server startup and shutdown times. **41:** indicates that your server rebooted but did not shut down completely. **6005:** indicates that the event log service was started. **1074:** this event shows when an application forcibly shuts down or reboots your VPS server. This allows you to know when you or someone else restarted or shut down the server from the "Start" menu or via CTRL+ALT+DEL. **6008:** this event appears if your computer was shut down or rebooted due to a blue screen of death. **6006:** this event shows when the server has properly shut down. ## **How to view these events in Windows Server?** Press **Win + R** and enter **eventvwr** ![How to view shutdown and restart logs in Windows Server - 1](https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661987063_1.png) On the left side of the panel, open "**Windows Logs = > System**" ![How to view shutdown and restart logs in Windows Server - 2](https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661987183_2.png) In the **Event ID** column, we will see a list of events that occurred during the operation of Windows. The event log can be sorted by event ID. To sort the events we need, on the right side, select "**Filter Current Log** " ![How to view shutdown and restart logs in Windows Server - 3](https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661987525_3.png) Now enter the events we need, separated by commas, **41, 1074, 6006, 6008, 6006** and click **OK.** ![How to view shutdown and restart logs in Windows Server - 4](https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661987745_4.png) Now we can observe the event log with the shutdown of our VPS server. We can also view the server uptime event log. This corresponds to the identifier **6013.** ![How to view shutdown and restart logs in Windows Server - 5](https://dx86q6oq7ry0e.cloudfront.net/uploads/media/blog/a48@server-panel.net/2022/09/01/1661988074_5.png) ## **Viewing the shutdown and restart log using PowerShell** If we need to quickly view the server shutdown/reboot logs, we can use the **Get-EventLog** command in the PowerShell shell. To filter the last 1000 entries in the log and display only the events we need, (**41, 1074, 6006, 6008, 6006**) execute this command in PowerShell: Get-EventLog System -Newest 1000 | ` Where EventId -in 41,1074,6006,6008 | ` Format-Table TimeGenerated,EventId,UserName,Message -AutoSize -wrap Now you can independently check why your server was rebooted/shut down. We also suggest you other useful articles: * [How to install updates on Windows Server 2012, Windows Server 2016, and Windows Server 2019](https://zomro.com/blog/faq/242-kak-ustanovit-obnovlenija-na-windows-server-2012-2016-2019) * [How to view RDP connection logs in Windows Server 2016, 2019](https://zomro.com/blog/faq/277-how-to-view-rdp-connection-logs-in-windows-2016-2019) * [Disable UDP for RDP connections to Windows Server](https://zomro.com/blog/faq/429-dissable-udp-for-rdp-on-windows) Similar articles: [FTP protocol: Detailed information about file transfer](https://zomro.com/blog/faq/447-ftp-protokol-podrobno-o-peredache-fajlov) [How to install AdGuard Home in Docker](https://zomro.com/blog/faq/300-kak-ustanovit-adguard-home-v-docker) [UFW firewall setup on Ubuntu 20.04](https://zomro.com/blog/faq/343-ufw-firewall-setup-on-ubuntu-2004) [How to Deploy Any Version of PHP in Docker-Compose](https://zomro.com/blog/faq/348-how-to-deploy-any-version-of-php-in-docker-compose-for-beginners) [How to Run PHP Script via Cron in Windows Server 2019](https://zomro.com/blog/faq/342-how-to-run-php-script-via-cron-in-windows-server-2019) [ Forex Server from €7.95/mon ](/server-for-forex)