Waxaa jira waxyaabo badan oo ku hoos jira daboolka kumbuyuutarka Windows . Isticmaalka Muuqaalka Dhacdada^{(Event Viewer)} , waxaa suurtogal ah in la socdo hababka Windows^{(track Windows processes)} , kaa caawinta inaad ogaato dhibaatooyinka xun iyada oo aan sabab cad.

Daawadeha Dhacdada^{(Event Viewer)} waxa ay noqon kartaa jahawareer isticmaalka, si kastaba ha ahaatee, taas oo ay ugu wacan tahay UI duugoobay iyo qaabayntiisa oo liidata. Halkan waxaa ah hage ku saabsan ka-socoshada Daawadaha Dhacdada^{(Event Viewer)} si loo ciladeeyo arrin kasta oo Windows ah.

Ku Bilaabashada Daawadaha Dhacdada^{(Event Viewer)}

Nidaamka Operating System-ka ee Daaqadaha ayaa "^{(Windows Operating System “)} diwaangeliya" hawl kasta oo muhiim ah inta uu socdo. Daawadeha Dhacdada^{(Event Viewer)} waa kaliya app kaa caawinaya inaad gasho oo aad ku akhrido diiwaanadan^{(read these logs)} hal meel, halkii aad gacanta ku furi lahayd fayl kasta oo qoraal ah Windows Explorer .

Fur Event Viewer adiga^{(Event Viewer)} oo ka raadinaaya abka ku jira Menu Start^{(Start Menu)} .

Kordhi abka isla marka uu furmo, sababtoo ah waxaad u baahan tahay muuqaalka shaashadda si aad u aragto dhammaan macluumaadka la hayo.

Fahamka Interface-ka

Daawade Dhacdada^{(Event Viewer)} ma laha interface dareen leh. Qalabku marka hore xoogaa jahawareer ayuu yeelan karaa, haddaba aan mid mid u dul-qaadno dhammaan curiyayaasha.

Qolka bidix

Markaad socoto Viewer Event^{(Event Viewer)} , waxaad ogaan doontaa in daaqadu u qaybsanto saddex qaybood. Dhinaca bidix waxay u kala saartaa dhacdooyinka muuqaalka galka, taasoo kuu ogolaanaysa inaad si dhakhso ah ugu socotid nooc gaar ah oo diiwaanka dhacdada ah.

Waxaa jira afar nooc oo waaweyn oo loox:

^(Custom)Aragtida Gaarka ah: Qaybta aragtida gaarka^(Custom) ah, sida magacu soo jeediyo, waxay kuu ogolaanaysaa inaad abuurto doorashooyin log-caadi ah intii aad la socon lahayd qaybaha caadiga ah. Tusaale ahaan, aragtida Dhacdooyinka Maamulka ee aan caadiga ahayn waxay ururisaa dhacdooyinka Halis^(Critical) ah , Khaladka^(Error) , iyo digniinta dhammaan diiwaannada maamulka.

^(Windows)Logs Windows : Galkan waxaa ku jira dhammaan diiwaannada ku saabsan adeegyada nidaamka Windows . Gaar ahaan faa'iido ma leh ilaa aad rabto in si faahfaahsan loo eego sida OS-gu u shaqeeyo.

Codsiyada iyo Diiwaangelinta Adeegyada^(Services) : Logyadan waxaa soo saaray dhammaan noocyada adeegyada, laga bilaabo adeegyada Windows -ka ee aan muhiimka ahayn ilaa codsiyada qolo saddexaad. Uma baahnid inaad liiskan ka dhex raadiso maadaama wixii khaladaad iyo digniino ahba lagu ururiyay aragtida Dhacdooyinka Maamulka.

Diiwaangelinta: Qaybtani maaha mid la heli karo si caadi ah, oo looma baahna inta badan kiisaska. Isticmaalkeeda kaliya ayaa ah in laga soo ururiyo dhacdooyinka kombiyuutarada fogfog, taas oo ka dhigaysa qalab maamul oo horumarsan.

Qaybta dhexe

Tani waa meesha ay dhab ahaantii ku qoran yihiin diiwaannada. Sida caadiga ah, waxay soo bandhigaysaa dulmar^(Overview) iyo Kooban^(Summary) dhacdooyinka, halkii ay ka ahaan lahayd nooc kasta oo gaar ah.

Qaybta koowaad (iyo malaha ugu muhiimsan) waa Soo koobida^(Summary) Dhacdooyinka Maamulka. Waxay taxday dhacdooyinka nidaamka muhiimka ah ee usbuucii la soo dhaafay, taasoo ku siinaysa muuqaal degdeg ah oo ku saabsan caafimaadka nidaamka. Dhacdooyinka sidoo kale waxaa lagu kala saaraa waqtigooda saacad, maalinle, iyo toddobaadle.

Waxa jira shan nooc oo dhacdo oo qaybtan ah:

Halis ah: Arrimo nidaam kasta oo weyn ayaa ka soo baxay qaybtan. Kumbuyuutar si fiican u shaqaynaya qaybtani waa inay madhan noqotaa, laakiin haddii aad aragto dhacdo noocan oo kale ah, u fiirso.
Khalad: Waxaa jira khaladaad kumbiyuutar kasta oo shaqaynaya. Sababtoo ah waxaa jira dhacdooyin ku taxan qaybtan macnaheedu maaha inay wax khaldan yihiin. Waa dhibaato keliya haddii isla qaladkaas uu si joogto ah u soo baxo maalin kasta.
Digniin: Digniinaha waxaa la soo saaraa marka aysan wax dhab ah weli khaldamin, laakiin waxay muujin kartaa arrin suurtagal ah. Tan waxaa ku jira waxyaabo ay ka mid yihiin meel bannaan oo disk ah, ama darawallada aan si habboon u habaysan.
Macluumaad: Midkani gabi ahaanba waa wax aan dhib lahayn, maadaama uu xusayo dhammaan hawlgallada lagu guulaystay ee kombiyuutarka. Isha inta badan waa adeegyada nidaamka, in kasta oo codsiyada ammaanku ay inta badan soo baxaan sidoo kale.
Guusha Hantidhawrka^{(Audit Success)} : Dhacdadan oo kale waxa la abuuraa mar kasta oo isku day xaqiijinta lagu guuleysto. Tan waxaa ku jira galitaanka iyo tallaabooyinka kale ee amniga, markaa ha ka welwelin inaad hesho xaalado badan waqti kasta.
Guuldarada Hanti-dhawrka: Sida magacu soo jeedinayo, dhacdadan noocaan ah waxa ku jira isku dayo xaqiijin oo fashilmay. Tani waa hab wanaagsan oo lagu arko haddii qof uu isku dayay inuu galo kombayutarkaaga, ha ahaato isku xirka shabakad ama gal toos ah.

Qolka midig

Qaybta saxda ah ee daaqada waxay ka kooban tahay dhammaan tallaabooyinka aad ku qaadi karto shay la doortay. Ficilku wuu isbedelaa iyadoo ku saleysan inaad haysato gal la doortay ama dhacdo.

Waxaad samayn kartaa Aragti gaar^{(Custom View)} ah , waxaad arki kartaa Guryaha^(Properties) log, ama Keydi^(Save) dhacdooyinka la xushay si aad hadhow u aragto, iyo ficilo kale.

Sida Loo Akhriyo Diiwaanka Dhacdada

Furitaanka aragtida iyo dhex marada diiwaannada dhacdada waa mid fudud oo ku filan, laakiin sidee ayaad macno u samaynaysaa dhammaan macluumaadkaas? Waa kan burburka

Markaad dooratid dhacdo, tabka Guud^(General) ayaa furmaya, isagoo soo bandhigaya kooban oo khaladka ah oo ay ku xigto farabadan macluumaadka:

Magaca Log: Magaca diiwaanka dhacdada waxaa iska leh. Inta badan faa'iido leh si loo aqoonsado adeegga Windows ee ay dhacdadani hoosteeda ka dhacday.
Isha: Sida caadiga ah waxay la mid tahay magaca log, sida ay u taxdo codsiga isha ee dhacdada.
Aqoonsiga Dhacdada: Dhacdo kastaa waxay leedahay aqoonsi dhacdo gaar ah. Aqoonsigani wuxuu caawiyaa in la ogaado dhacdo gaar ah oo ka timid dhacdooyinka kale ee dabeecadda la midka ah, xitaa marka ay ka soo baxaan hab isku mid ah.
Heerka: Tani waa calaamadda go'aamisa heerka mudnaanta dhacdada. Waxaad hore u aragtay calaamadaha sida Error iyo Critical ee Aragtida Maamulka^{(Administrative View)} , goobtanina waa meesha laga soo qaatay.
Isticmaale^(User) : Koontada Isticmaalaha^(User) ee abuurtay dhacdada. Faa'iido u leh ogaanshaha dhibaatooyinka hababka isticmaalayaasha badan.
OP Code : Goobtani waa in ay tilmaamto hawsha habka su'aasha ka hor inta aan dhacdada la kicin, laakiin ficil ahaan had iyo jeer waxay ku dhacdaa macluumaadka^(Info) .
Logged: Shaabadda wakhtiga dhacdada, oo ay ku jirto taariikhda sidoo kale.
Qaybta Hawsha^{(Task Category)} : Goob kale ayaa loo malaynayaa inay bixiso macluumaad dheeraad ah oo ku saabsan habka asalka ah, inkasta oo inta badan laga tagay madhan.
Kumbuyuutar^(Computer) : Magaca PC-ga abuuray dhacdada. Faa'iido ma leh marka aad ku shaqaynayso hal nidaam, laakiin muhiim ah markaad la tacaalayso dhacdooyinka laga soo gudbiyay kombuyuutar shabakadeed.

Taasi waxay u ekaan kartaa macluumaad badan oo la qaadan karo, laakiin uma baahnid inaad akhrido dhammaan goobaha. Goobaha ugu muhiimsan waa Heer^(Level) iyo Isha^(Source) .

Heerka^(Level) , waxaad sheegi kartaa sida ay dhacdada u daran tahay (iyadoo dhacdooyinka halista^(Critical) ah ay yihiin kuwa ugu muhiimsan) iyo Isha^(Source) ayaa ku ogeysiinaysa abka ama qaybta asalka ah. Tani waxay kuu ogolaanaysaa inaad hesho oo aad disho habka dhibka leh^{(kill the problematic process)} .

Sida loo xalliyo Dhibaatooyinka Windows^{(Troubleshoot Windows Problems)} ee Daawadaha Dhacdada^{(Event Viewer)} ?

Marka aad la kulanto shil degdeg ah oo nidaamka, joogsiga ugu horreeya waa inuu noqdaa Daawadeha Dhacdada^{(Event Viewer)} . Orod Aragtida Maamulka^{(Administrative View)} oo hubi wixii dhacdooyin Halis ah

Sida shilalka nidaamka dilaaga ahi had iyo jeer dhaliyo dhacdo halis ah, tani waxay kaa caawinaysaa inaad si dhakhso ah hoos ugu dhigto habka khaldan oo aad bilowdo raadinta hagaajinta^{(zero down on the errant process and start looking for a fix)} . Iyada oo ku xidhan qaybta Windows ee ku lug leh, hagaajintu waxay noqon kartaa mid fudud sida cusboonaysiinta darawalada ama socodsiinta SFC ee Dakhliga Amarka^{(Command Prompt)} .

Arrimaha yaryar, waxaa laga yaabaa inaad sidoo kale u gudubto dhacdooyinka Khaladka^(Error) . Way ku caawinaysaa haddii aad taqaan app-ka ama sifada si xun u dhaqmaysa, maadaama xitaa nidaamka caafimaadka qaba uu keeno khaladaad.

How to Use Event Viewer to Troubleshoot Windows Problems

There is a lot going under the hood of a Windows computer. Using the Event Viewer, it’s possible to track Windows processes, helping you diagnose pesky problems without an obvious cause.

The Event Viewer can be confusing to use, however, owing to its outdated UI and poor layout. Here is a guide on navigating the Event Viewer to troubleshoot any Windows issues.

Getting Started With the Event Viewer

The Windows Operating System “logs” every significant activity while it runs. The Event Viewer is just an app that helps you access and read these logs in one place, rather than manually opening each text file in Windows Explorer.

Open Event Viewer by searching for the app in the Start Menu.

Maximize the app as soon as it opens, because you need the full-screen view to see all the information available.

Understanding the Interface

Event Viewer doesn’t exactly have an intuitive interface. The tool can be a bit confusing at first, so let’s go over all the elements one by one.

Left Pane

On running Event Viewer, you will notice that the window is divided into three panes. The left side categorizes the events in a folder view, letting you quickly navigate to a particular type of event logs.

There are four main types of logs:

Custom Views: The Custom views category, as the name suggests, lets you create custom log selections instead of sticking with the standard categories. For example, the default Administrative Events view collects the Critical, Error, and Warning events from all administrative logs.

Windows Logs: This folder includes all logs concerning Windows system services. It’s not particularly useful unless you want a detailed look at how the OS is operating.

Applications and Services Logs: These logs are generated by all kinds of services, from non-critical Windows services to third-party applications. You don’t need to trawl through this list as any errors and warnings are already collected in the Administrative Events view.

Subscriptions: This category is not available by default, and is unnecessary in most cases. Its only use is to collect events from remote computers, making it an advanced system administration tool.

Middle Pane

This is where the logs are actually listed. By default, it displays an Overview and Summary of events, rather than any specific category.

The first section (and probably the most important) is the Summary of Administrative Events. It lists crucial system events in the past week, giving you a quick glimpse of the system’s health. The events are also classified by their timeframes on an hourly, daily, and weekly basis.

There are five event types in this section:

Critical: Any major system issues crop up in this category. In a properly functioning computer this category should be empty, but if you spot an event of this type, pay attention to it.
Error: There are errors in any functional computer. Just because there are events listed in this category does not mean something is necessarily wrong. It is a problem only if the same error shows up frequently on a daily basis.
Warning: Warnings are generated when something hasn’t really gone wrong yet, but might indicate a possible issue. This includes things like low disk space, or improperly configured drivers.
Information: This one is completely harmless, as it notes all successful operations on the computer. The source is usually system services, though security applications often show up as well.
Audit Success: This type of event is generated whenever an authentication attempt is successful. This includes logins and other security measures, so don’t be alarmed to find multiple instances in every timeframe.
Audit Failure: As the name suggests, this event type includes failed authentication attempts. This is a good way to see if anyone has tried gaining access to your PC, either through a network connection or a direct login.

Right Pane

The right panel of the window contains all actions you can take for a selected item. The actions change based on whether you have a folder selected or an event.

You can Create a Custom View, view the Properties of a log, or Save Selected Events to view them later, among other actions.

How to Read Event Logs

Opening a view and going through the event logs is simple enough, but how do you make sense of all that information? Here’s a breakdown.

When you select an event, the General tab opens up, displaying a short summary of the error followed by a bunch of information fields:

Log Name: The name of the log the event belongs to. Mostly useful to identify the Windows service under which the event occurred.
Source: Usually the same as the log name, as it lists the source application of the event.
Event ID: Each event has a unique event ID. This ID helps identify a specific event from other events of a similar nature, even when they are generated from the same process.
Level: This is the tag that decides the priority level of the event. You have already seen tags like Error and Critical in the Administrative View, and this field is where they are taken from.
User: The User account that generated the event. Useful in diagnosing problems in multi-user systems.
OP Code: This field is supposed to identify the activity of the process in question before the event was triggered, but in practice almost always defaults to Info.
Logged: The timestamp of the event, including the date as well.
Task Category: Another field supposed to provide additional information about the originating process, though mostly left empty.
Computer: The name of the PC that created the event. Useless when you are working with a single system, but crucial when dealing with events forwarded from a network computer.

That may seem like a lot of information to take in, but you don’t need to read through all the fields. The most important fields are Level and Source.

With Level, you can tell how serious the event is (with Critical events being most important) and Source informs you of the originating app or component. This lets you find and kill the problematic process.

How to Troubleshoot Windows Problems With the Event Viewer?

When you suffer a sudden system crash, your first stop should be the Event Viewer. Run the Administrative View and check for any Critical events.

As fatal system crashes always generate a critical event, this helps you quickly zero down on the errant process and start looking for a fix. Depending on the Windows component involved, the fix might be as simple as updating drivers or running SFC from the Command Prompt.

For smaller issues, you may have to go through the Error events as well. It helps if you know which app or feature is misbehaving, as even a healthy system generates some errors.

Riley Norman

About the author

Waxaan ahay xamaasad Windows Phone ah, oo waxaan ka shaqaynayey horumarinta habab cusub oo loo isticmaalo nidaamka qalliinka in ka badan 10 sano hadda. Waxaan si qoto dheer u fahmay sida Microsoft Office u shaqeeyo, iyo sidoo kale sida ugu badan ee looga faa'iidaysto Edge. Khibradayda taleefannada casriga ah waxay sidoo kale ii ogolaataa inaan horumariyo xiriir adag oo aan la yeesho macaamiisha iyo shaqaalaha aan wada-shaqeynta, taas oo muhiim u ah xirfad kasta.

Sida loo Isticmaalo Daawade Dhacdo si loo xalliyo Dhibaatooyinka Windows

Ku Bilaabashada Daawadaha Dhacdada^{(Event Viewer)}