Ogaanshaha markii ugu dambeysay ee PC-ga si sax ah loo damiyo ama kor loo qaado waa habka lagu bilaabo cilad-saarka arrimo badan oo Windows ah. Xaalad kale waa nidaam dadweyne. Waad ku mahadsan tahay Daawadaha Dhacdada^{(Event Viewer)} , maamulayaashu waxay arki karaan oo la socon karaan isticmaalka aan la fasixin ee kombiyuutarka .

Sabab kasta ha noqotee, waxaad ogaan kartaa markii ugu dambeysay ee PC-gaaga la geliyay oo si toos ah looga xiray Windows . Uma baahnid app dhinac saddexaad tan; Daawadaha Dhacdada Windows^{(Windows Event Viewer)} ayaa si fiican u maareyn kara.

Waa maxay Daawaha Dhacdada Windows?

Daawadaha Dhacdada Windows^{(Windows Event Viewer)} waa Microsoft Management Console ( MCC ) - adeegga asaasiga ah ee Windows oo aan la joojin karin ama la joojin karin. Waxay la socotaa dhaqdhaqaaq kasta oo ka dhaca PC-gaaga.

Inta lagu jiro dhacdo kasta, Daawadeha Dhacdada^{(Event Viewer)} waxa uu diiwangeliyaa gelinta. Waxa kale oo ay diiwaan gelisaa bilowga iyo joogsiga wakhtiyada adeegga log ee dhacdada^{(event log service)} ( Windows ), iyadoo siinaya taariikhda saxda ah, wakhtiga, iyo faahfaahinta isticmaalaha habka xidhid kasta.

Sida loo isticmaalo Daawaha Dhacdada?

Marka laga reebo kaydinta diiwaanka marka Windows -kaagu bilaabo iyo joogsado, waxaad u isticmaali kartaa Daawadeha Dhacdooyinka^{(Event Viewer)} waxyaabaha soo socda:

1. Abuur^(Create) aragtiyo gaar ah adoo kaydinaya filtarrada dhacdooyinka waxtarka leh.
2. Waxaad ka arki kartaa dhacdooyinka diiwaanka dhacdooyinka kala duwan.
3. Waxa kale oo aad samayn kartaa oo aad maamuli kartaa is-diiwaangelin dhacdo oo kala duwan.
4. Samee^(Create) oo qorshee hawl aad ku socoto marka ay kiciso dhacdo kale.

Noocyada dhacdooyinka Windows ee la xiriira daminta iyo dib u bilaabista

Waxay ka badan yihiin afar dhacdo oo la xidhiidha xidhitaanka iyo dib u bilaabista Windows 10 nidaamka hawlgalka; shanta muhiimka ah ayaanu ku qori doonaa. Waxay kala yihiin:

• Aqoonsiga Dhacdada 41^{(Event ID 41)} : Dhacdadani waxay muujinaysaa in Windows dib loo bilaabay iyada oo aan la xidhin gabi ahaanba.
• Aqoonsiga Dhacdada 1074^{(Event ID 1074)} : Dhacdadan waxa la qoraa marka codsi uu masuul ka yahay nidaamka la xidho ama dib loo bilaabo. Waxa kale oo ay muujinaysaa marka isticmaaluhu dib u bilaabo ama xidho nidaamka isaga oo isticmaalaya Start menu ama adigoo riixaya CTRL+ALT+DEL .
• Aqoonsiga Dhacdada 6006^{(Event ID 6006)} : Dhacdadani waxay muujinaysaa in Windows si ku filan loo damiyay.
• Aqoonsiga Dhacdada 6008^{(Event ID 6008)} : Dhacdadani^(Event) waxay muujinaysaa xidhid aan habboonayn ama wasakh ah. Waxay soo baxaysaa markii xidhitaankii ugu dambeeyay uu ahaa mid lama filaan ah.

Sida loo helo xidhitaanka log in Windows 11/10

Waa siyaabo kala duwan oo lagu ogaan karo mid ka mid ah dhacdooyinka kor ku xusan. Habka dhaqameed waa iyada oo loo marayo app Viewer laftiisa. ^{(Event Viewer)}Inta badan dhacdooyinka waxaa lagu geli karaa Amarka degdegga^{(Command Prompt)} , sida aad hoos ku arki doonto.

1] Ka eeg^(View) xidhidhka oo dib uga bilow dhacdooyinka Daawadeha Dhacdada^{(Event Viewer)}

Fur sanduuqa wada hadalka Run , oo geli eventvwr.msc^{(eventvwr.msc)} ka dibna ku dhufo OK . Daawashada Dhacdada, ka dooro Logs Windows^{(Windows Logs)} > System ka dhanka bidix. Laga bilaabo midigta, dhagsii isku xirka Filter Log Current^{(Filter Current Log)} .

Ku qor 41,1074,6006,6008 sanduuqa hoose ku Includes/Exclude Event IDs...dhufo OK . Daaqadaha ayaa markaa soo bandhigaya dhammaan dhacdooyinka xidhitaanka.

Daawadeha Dhacdada^{(Event Viewer)} ayaa muujinaya macluumaad faahfaahsan oo ku saabsan hawlgal kasta oo lagu sameeyo nidaamka. Baro sida loo arko diiwaanka dhacdada oo buuxa maqaalkan^{(this article)} .

2] Eeg^(See) wakhtiga xidhitaanka ee ugu dambeeya adoo isticmaalaya Command Prompt

Fur Command Prompt , koobi oo ku dheji koodka soo socda daaqada, oo ku dhufo Gelida^(Enter) :

wevtutil qe system "/q:*[System [(EventID=1074)]]" /rd:true /f:text /c:1

Si aad u aragto shaambada wakhtiga^(timestamp) xidhitaanka ugu dambeeya iyada oo aan tafaasiil kale la hayn, koobi oo dheji koodka hoose ka dibna ku dhufo Geli:^(Enter:)

wevtutil qe system "/q:*[System [(EventID=1074)]]" /rd:true /f:text /c:1 | findstr /i "date"

Ilaa inta habkani uu ku guuleysto shaqada, waxaan inta badan kugula talineynaa inaad isticmaasho habka koowaad, kaas oo ah Muuqaalka Dhacdada^{(Event Viewer)} . Ma aha oo kaliya inay si toos ah u toosan tahay, laakiin sidoo kale kuma lug laha koobiyaynta iyo dhejinta amarrada.

Waxaan rajeyneynaa inaad u aragto qoraalkan mid waxtar leh.

Akhri wax la xidhiidha^{(Related read)} : Sida loo ogaado Windows Downtime, Uptime and Last shutdown Time^{(How to find out Windows Downtime, Uptime and Last Shutdown Time)} .

How to check the Shutdown and Startup Log in Windows 11/10

Finding out the last time the PC was cоrrectly turned off or booted up is the way to start for troubleshooting many Windows issues. Another scenario is a public system. Thаnks to the Event Viewer, administrators can view and monitor unauthorized use of the computer.

Whatever reason it is, you can find out when last your PC was put on and shut down directly from Windows. You don’t need a third-party app for this; the Windows Event Viewer can handle it perfectly.

What is the Windows Event Viewer?

The Windows Event Viewer is a Microsoft Management Console (MCC) – a core service of Windows that cannot be stopped or disabled. It keeps track of every activity that takes place on your PC.

During every event, the Event Viewer logs entries. It also logs the start and stop times of the event log service (Windows), giving correct date, time, and user details of every shutdown process.

How to use the Event Viewer?

Aside from keeping a log of when your Windows start and stop, you can use the Event Viewer for the following:

1. Create custom views by saving useful events filters.
2. You can see events from different event logs.
3. You can also create and manage different event subscriptions.
4. Create and schedule a task to run when triggered by another event.

Types of events in Windows related to shutting down and restarting

They are more than four events related to shutting down and restarting the Windows 10 operating system; we will list the important five. They are:

• Event ID 41: This event indicates that Windows rebooted without a complete shutdown.
• Event ID 1074: This event is written down when an application is responsible for the system shut down or restart. It also indicates when a user restarted or shut down the system by using the Start menu or by pressing CTRL+ALT+DEL.
• Event ID 6006: This event indicates that Windows was adequately turned off.
• Event ID 6008: This Event indicates an improper or dirty shutdown. It shows up when the most recent shutdown was unexpected.

How to find the shutdown log in Windows 11/10

They are different ways to find out any of the events listed above. The traditional way is through the Event Viewer app itself. Most events can be accessed with the Command Prompt, as you will see below.

1] View shutdown and restart events from Event Viewer

Open the Run dialogue box, and input eventvwr.msc then hit Ok. In Event Viewer, select Windows Logs > System from the left pane. From the right, click on the Filter Current Log link.

Type in 41,1074,6006,6008 into the box below Includes/Exclude Event IDs... Hit Ok. Windows then displays all shutdown-related events.

The Event Viewer shows detailed information on every operation carried out on the system. Learn how to view full event viewer logs in this article.

2] See the last shutdown time using Command Prompt

Open the Command Prompt, copy and paste the following code in the window, and hit Enter:

wevtutil qe system "/q:*[System [(EventID=1074)]]" /rd:true /f:text /c:1

To view the timestamp of the last shutdown without other details, copy and paste the code below then hit Enter:

wevtutil qe system "/q:*[System [(EventID=1074)]]" /rd:true /f:text /c:1 | findstr /i "date"

As much as this method gets the job done, we often suggest you use method one, which is the Event Viewer. Not only is it more straightforward, but it also doesn’t involve copying and pasting commands.

We hope you find this post useful.

Related read: How to find out Windows Downtime, Uptime and Last Shutdown Time.

Related posts

• Sida loo sahlo ama loo joojiyo Boot Log in Windows 11/10

• Halkee laga helaa iyo sida loo akhriyo galitaanka Cusboonaysiinta Windows Windows 11/10

• Daawadeyaasha dhacdooyinka ayaa ka maqan Windows 11/10

• Daawade Dhacdada ayaa ka maqan Windows 11/10

• Aaway faylka log ee BSOD gudaha Windows 11/10?

• Dayactirka Bilawga Tooska ah ayaa ku hagaajin kari waayay PC-gaaga gudaha Windows 11/10

• Liiska Wadooyinka Bilawga, Folderyada iyo Dejinta Diiwaanka gudaha Windows 11/10

• La soco faylasha Log Event Windows ka hubinta utility dabada SnakeTail

• Sida loo beddelo darawallada adag ee gudaha Windows 11/10 oo leh Hot Swap

• Jadwalka xidhitaanka ama dib u bilaaba adoo isticmaalaya Jadwalka Hawsha gudaha Windows 11/10

• Daar ikhtiyaarka bilawga degdega ah ee ka maqan Windows 11/10

• Software-ka Bilowga Bilowga ah ee Windows 11/10

• Dami Abkani waxa uu ka hortagayaa xidhitaanka fariinta gudaha Windows 11/10

• Waa maxay Habka Bilowga Xulashada ee Windows 11/10

• Dib u celi, dhaqaaq, ama tirtir PageFile.sys marka la xirayo gudaha Windows 11/10

• Sida loo sameeyo Dayactirka Bilawga Tooska ah ee Windows 11/10

• Hagaaji khaladaadka Log Console Discord on Windows 11/10 kumbuyuutarka

• Dejinta oggolaanshaha gaarka ah ee arjiga ma siiso firfircoonida maxalliga ah

• Sida loo arko Diiwaanka Dhacdada ee Windows si faahfaahsan iyada oo la adeegsanayo View Event Log Full

• Software-ka ugu fiican ee ISO Mounter ee bilaashka ah ee Windows 11/10