Event Viewer, accessible via the command eventvwr.msc, is a powerful tool in Windows operating systems that allows users to view and analyze event logs on local or remote machines. These logs can provide critical information for troubleshooting and monitoring system performance and security.

Examples:

1. Accessing Event Viewer via Run Dialog:

   • Press Win + R to open the Run dialog.
   • Type eventvwr.msc and press Enter.
   • This will launch the Event Viewer, where you can navigate through various logs such as Application, Security, and System logs.

2. Opening Event Viewer via Command Prompt:

   • Open Command Prompt by typing cmd in the Windows search bar and pressing Enter.
   • Type eventvwr and press Enter.
   • This command will open Event Viewer directly from the Command Prompt.

3. Using PowerShell to Open Event Viewer:

   • Open PowerShell by searching for it in the Start menu.
   • Type Start-Process eventvwr.msc and press Enter.
   • This command will launch Event Viewer using PowerShell.

4. Filtering Event Logs:

   • Once in Event Viewer, you can filter logs to find specific events.
   • Select a log (e.g., System), right-click, and choose "Filter Current Log."
   • Use the filter options to specify criteria such as Event Level, Event IDs, or keywords.

5. Exporting Event Logs:

   • To export logs, select the desired log, right-click, and choose "Save All Events As..."
   • Choose a location and save the log file in formats like .evtx or .xml for further analysis or archiving.

6. Creating a Custom View:

   • In Event Viewer, click on "Create Custom View" in the Actions pane.
   • Specify the criteria for your custom view, such as log type, event level, and time range.
   • Save the custom view for quick access to specific logs in the future.