Event Viewer, also known as eventvwr, is a Microsoft Management Console (MMC) application available in the Windows operating system. It allows users to view and analyze event logs on their computers. These logs are essential for diagnosing and troubleshooting various issues, monitoring system health, and understanding system and application behavior.

Examples:

1. Opening Event Viewer:

   • Via Start Menu:

     1. Click on the Start menu.
     2. Type "Event Viewer" in the search box.
     3. Press Enter or click on the Event Viewer app from the search results.

   • Via Run Dialog:

     1. Press Win + R to open the Run dialog.
     2. Type eventvwr and press Enter.

   • Via Command Prompt:

     1. Open Command Prompt by typing cmd in the Start menu search and pressing Enter.
     2. Type eventvwr and press Enter.

2. Navigating Event Viewer:

   • Once Event Viewer is open, you will see a tree structure on the left pane. The main sections include:
     • Custom Views: Allows you to create and manage custom views of events.
     • Windows Logs: Contains logs related to applications, security, setup, system, and forwarded events.
     • Applications and Services Logs: Contains logs from individual applications and services.

3. Viewing Logs:

   • To view a log, expand the desired section (e.g., Windows Logs) and click on a log type (e.g., System).
   • The middle pane will display a list of events. Click on an event to view its details in the lower pane.

4. Filtering Logs:

   • To filter logs for specific events:
     1. Click on the log type you are interested in (e.g., Application).
     2. In the Actions pane on the right, click on "Filter Current Log..."
     3. Set your filter criteria (e.g., Event Level, Event IDs, Keywords) and click OK.

5. Creating Custom Views:

   • To create a custom view:
     1. In the Actions pane, click on "Create Custom View..."
     2. Set your criteria for the custom view, such as time range, event level, and log sources.
     3. Click OK and give your custom view a name.
     4. The custom view will appear under the Custom Views section.

6. Exporting Logs:

   • To export logs for further analysis or sharing:
     1. Select the log you want to export.
     2. In the Actions pane, click on "Save All Events As..."
     3. Choose a location and file format (e.g., .evtx, .xml, .txt) and click Save.