win7事件查看器事件id

The Event Viewer allows you to diagnose system and application problems in Windows. It has been enhanced in Windows 7; however, it still does not provide much information about the events in the interface.

使用事件查看器可以診斷Windows中的系統和應用程序問題。 Windows 7已對其進行了增強。 但是，它仍然沒有提供有關接口事件的太多信息。

You can find out more information about an event by looking up its Event ID in a database containing a list of Event IDs and their descriptions. When using the default Windows Event Viewer, you would have to search for the Event ID on the internet to try to find more information about it.

您可以通過在包含事件ID及其說明列表的數據庫中查找事件ID來找到有關事件的更多信息。 使用默認的Windows事件查看器時，您將必須在Internet上搜索事件ID才能查找有關它的更多信息。

We found a tool that is free for personal use, called Event Log Explorer, that is a replacement for the default Windows Event Viewer. It displays the same amount of information as the Event Viewer, but it provides a quick and easy method for looking up Event IDs on the internet. A simple right-click on an event allows you to look up the Event ID in the EventID.Net database or the Microsoft Knowledge Base.

我們找到了一個免費的個人使用工具，稱為“事件日志資源管理器”，該工具替代了默認的Windows事件查看器。 它顯示與事件查看器相同的信息量，但是它提供了一種快速簡便的方法來在Internet上查找事件ID。 只需在事件上單擊鼠標右鍵，便可以在EventID.Net數據庫或Microsoft知識庫中查找事件ID。

To install Event Log Explorer, extract the .zip file and double-click the .exe file. Follow the instructions in the setup wizard.

要安裝事件日志資源管理器，請解壓縮.zip文件，然后雙擊.exe文件。 請按照安裝向導中的說明進行操作。

If you didn’t choose to launch Event Log Explorer at the end of the setup wizard, start the program from the desktop or the start menu.

如果未選擇在安裝向導的末尾啟動“事件日志資源管理器”，請從桌面或開始菜單啟動程序。

If the User Account Control dialog box displays, click Yes to continue.

如果顯示“用戶帳戶控制”對話框，請單擊“是”繼續。

NOTE: You may not see this dialog box, depending on your User Account Control settings.

注意：根據您的“ 用戶帳戶控制”設置 ，您可能看不到此對話框。

A dialog box displays saying you are running in evaluation mode. The evaluation expires 30 days after you install it; however, you can get a free license key. Click the Get FREE License Now link.

將顯示一個對話框，說明您正在評估模式下運行。 該評估版在安裝后30天到期； 但是，您可以獲得免費的許可證密鑰。 單擊立即獲取免費許可證鏈接。

A web page opens in your default browser. Fill out the form to receive your free license key. Once you see a web page containing the seven-line key, select the seven lines between, but not including, the BEGIN KEY and END KEY lines and copy them.

在您的默認瀏覽器中將打開一個網頁。 填寫表格以獲取免費的許可證密鑰。 一旦看到包含七行鍵的網頁，請選擇BEGIN KEY和END KEY行之間的七行，但不包括它們，然后復制它們。

To enter the license key before starting the program, go back to the Event Log Explorer dialog box. Select the Enter license key radio button and click OK.

要在啟動程序之前輸入許可證密鑰，請返回“事件日志瀏覽器”對話框。 選擇輸入許可證密鑰單選按鈕，然后單擊確定。

On the Registration Key dialog box, paste the copied key into the edit box and click OK.

在“注冊密鑰”對話框中，將復制的密鑰粘貼到編輯框中，然后單擊“確定”。

The following dialog box displays, even if the program is not open. Click OK to close it.

即使未打開程序，也會顯示以下對話框。 單擊確定將其關閉。

If you didn’t select to enter the license key before starting the program, you can do so within the program by selecting Enter registration key from the Help menu.

如果在啟動程序之前未選擇輸入許可證密鑰，則可以在程序內通過從“幫助”菜單中選擇“輸入注冊密鑰”來進行輸入。

When Event Log Explorer opens, click the plus sign next to the item in the Computer Tree to expand the list.

當事件日志資源管理器打開時，單擊“計算機樹”中該項目旁邊的加號以展開列表。

There are two methods for viewing multiple event logs, tabs and multiple document interface (MDI). To change the view, select Preferences from the File menu.

有兩種查看多個事件日志的方法，選項卡和多個文檔界面(MDI)。 若要更改視圖，請從“文件”菜單中選擇“首選項”。

On the Preferences dialog box, make sure General is selected in the tree on the left. Select Multiple document interface or Tabbed document interface in the User interface box. Click OK to save your changes.

在“首選項”對話框中，確保在左側的樹中選擇了“常規”。 在用戶界面框中選擇多文檔界面或選項卡式文檔界面。 單擊確定保存更改。

The Multiple document interface looks like the following image. Each document is a separate window within the application.

多重文檔界面如下圖所示。 每個文檔是應用程序內的單獨窗口。

You can also choose whether to open a log by single-clicking or double-clicking on it by selecting an option on the General screen on the Preferences dialog box.

您還可以通過在“首選項”對話框的“常規”屏幕上選擇一個選項來選擇是通過單擊還是雙擊來打開日志。

One of the most useful features of Event Log Explorer that makes it more useful than the default Windows Event Log Viewer is the ability to easily look up event IDs in two different databases online. To do this, right-click on an event in the right pane and select Lookup in Knowledge Bases from the popup menu. Two options display on a submenu. Select an option depending on whether you want to look up the event ID in the EventID.Net database or the Microsoft Knowledge Base.

與默認的Windows Event Log Viewer相比，Event Log Explorer最有用的功能之一就是能夠輕松地在線查找兩個不同數據庫中的事件ID。 為此，請右鍵單擊右窗格中的事件，然后從彈出菜單中選擇“在知識庫中查找”。 子菜單上顯示兩個選項。 根據要在EventID.Net數據庫還是Microsoft知識庫中查找事件ID，選擇一個選項。

For example, the following image shows Event ID 1000 displayed on the EventID.Net website.

例如，下圖顯示了EventID.Net網站上顯示的事件ID 1000。

You can also filter the logs. To do this, click Filter on the toolbar.

您還可以過濾日志。 為此，請單擊工具欄上的“篩選器”。

NOTE: You can also select Filter from the View menu or press Ctrl + L.

注意：您也可以從“視圖”菜單中選擇“過濾器”或按Ctrl +L。

Use the Filter dialog box to specify which logs to apply the filter to and to select and enter your filter criteria. Click OK to accept your changes and view your filtered list on the Event Log Explorer main window.

使用“過濾器”對話框可以指定要應用過濾器的日志，并選擇并輸入過濾條件。 單擊“確定”接受更改，然后在“事件日志資源管理器”主窗口中查看過濾的列表。

You can also backup event logs. To do this, select Save Log As | Save Event Log from the File menu. Enter a name for the backup file and select .evt or evtx as the file type. Use .evt for event log backup files you want to be able to open in Windows XP or earlier. The .evtx extension applies to event log backup files to be opened in Windows 7 or Vista.

您還可以備份事件日志。 為此，請選擇“另存為” | 從文件菜單中保存事件日志。 輸入備份文件的名稱，然后選擇.evt或evtx作為文件類型。 將.evt用于您希望能夠在Windows XP或更早版本中打開的事件日志備份文件。 .evtx擴展名適用于要在Windows 7或Vista中打開的事件日志備份文件。

If you want to view event log information outside of the Event Log Explorer, you can export logs as other formats. To export the currently open log, select Export Log from the File menu.

如果要在事件日志資源管理器之外查看事件日志信息，則可以將日志導出為其他格式。 要導出當前打開的日志，請從“文件”菜單中選擇“導出日志”。

The Export Log dialog box displays. Select the format for the exported log file from the Export to box and whether you want to export all or just selected events from the Export scope box. You can also specify to export event descriptions and data, if desired. To automatically close the Export Log dialog box when the export is finished, select the Close this dialog when export is done. Click Export to start the exporting process.

顯示“導出日志”對話框。 從“導出到”框中選擇導出日志文件的格式，然后從“導出范圍”框中選擇導出所有事件還是僅導出選定的事件。 如果需要，還可以指定導出事件描述和數據。 要在導出完成后自動關閉“導出日志”對話框，請選擇“導出完成后關閉此對話框”。 單擊導出開始導出過程。

If you want to view event logs from other computers accessible from your current computer, click Add Computer on the toolbar.

如果要從當前計算機可訪問的其他計算機查看事件日志，請單擊工具欄上的“添加計算機”。

NOTE: You can also select Add Computer from the Tree menu.

注意：您還可以從樹菜單中選擇添加計算機。

Select the Another computer option and use the … button to select a computer in your network. Enter a description, select a group, and click OK to connect to the computer.

選擇另一臺計算機選項，然后使用…按鈕在網絡中選擇一臺計算機。 輸入描述，選擇一個組，然后單擊“確定”以連接到計算機。

To change properties for the currently selected event log, select Log Properties from the File menu.

若要更改當前所選事件日志的屬性，請從“文件”菜單中選擇“日志屬性”。

NOTE: You can also right-click on an event log in the tree on the left and select Properties from the popup menu.

注意：您也可以右鍵單擊左側樹中的事件日志，然后從彈出菜單中選擇“屬性”。

The Log Properties dialog box displays. The event log that these properties apply to displays on the title bar of the dialog box.

顯示“日志屬性”對話框。 這些屬性適用的事件日志顯示在對話框的標題欄上。

We have previously discussed how to change the maximum size for logs. You can do the same thing in Event Log Explorer. Enter a size in the Maximum log size edit box or use the arrows to select a size. The same three options are available for what to do when the maximum log size is reached. However, there is one extra option. You can have Event Log Explorer backup the log automatically when the maximum size is reached. For more information about automatically backing up log files, click the More info link to open the corresponding help topic. The help file describes where the files are saved and the file naming convention used.

前面我們討論了如何更改日志的最大大小 。 您可以在事件日志資源管理器中執行相同的操作。 在“最大日志大小”編輯框中輸入大小，或使用箭頭選擇大小。 當達到最大日志大小時，可以使用相同的三個選項進行操作。 但是，還有一個額外的選擇。 當達到最大大小時，可以使事件日志資源管理器自動備份日志。 有關自動備份日志文件的更多信息，請單擊“更多信息”鏈接以打開相應的幫助主題。 幫助文件描述了文件的保存位置以及使用的文件命名約定。

NOTE: Make sure you don’t let too many backed up log files collect too long, as they will take up a lot of space on your computer’s hard drive over time. Monitor the files and move them to another drive or delete them from time to time.

注意：確保不要讓太多的備份日志文件收集的時間過長，因為隨著時間的推移，它們會占用計算機硬盤驅動器上的大量空間。 監視文件并將它們移動到另一個驅動器或不時刪除它們。

To close Event Log Explorer, select Exit from the File menu to close Event Log Explorer. The following dialog box displays making sure you really want to quit. If you don’t want to see this dialog box every time you close Event Log Explorer, select the Don’t ask me again check box. Click Yes to continue closing the program.

若要關閉事件日志資源管理器，請從“文件”菜單中選擇“退出”以關閉事件日志資源管理器。 將顯示以下對話框，確保您確實要退出。 如果不想每次關閉事件日志瀏覽器時都看到此對話框，請選中“不再詢問我”復選框。 單擊“是”繼續關閉程序。

Event Log Explorer saves your workspace to a file so when you open the program the next time, the same tabs (or documents) open and other settings you have changed remain the same. If you made changes to the current workspace in Event Log Explorer, the following dialog box displays. If you haven’t saved your workspace yet, the file name is listed as Untitled.ELX. If you want to save your workspace changes, click Yes.

事件日志資源管理器將您的工作空間保存到文件中，因此當您下次打開該程序時，將打開相同的選項卡(或文檔)，并且您更改的其他設置保持不變。 如果您在“事件日志資源管理器”中對當前工作空間進行了更改，則會顯示以下對話框。 如果尚未保存工作區，則文件名將列為Untitled.ELX。 如果要保存工作區更改，請單擊“是”。

Again, the Don’t ask me again option is available. If you select that option for saving changes to your workspace, any changes you make while in Event Log Explorer next time are automatically saved.

同樣，“不再詢問我”選項可用。 如果選擇該選項將更改保存到工作區，則下次在“事件日志資源管理器”中所做的任何更改都會自動保存。

If you selected to save your workspace changes, and this is the first time saving your workspace, the Save Workspace As dialog box displays. Navigate to a location where you want to save your workspace settings, enter a name for your workspace in the File name edit box, and click Save. You can have multiple workspaces in Event Log Explorer.

如果選擇保存工作區更改，并且這是第一次保存工作區，則會顯示“將工作區另存為”對話框。 導航到要保存工作空間設置的位置，在“文件名”編輯框中輸入工作空間的名稱，然后單擊“保存”。 您可以在事件日志資源管理器中擁有多個工作空間。

Event Log Explorer is a useful tool to add to your software toolbox. The only limitation of the free version is that it does not allow you to connect to more than three computers. If that is not a problem for you, it should fulfill your needs.

事件日志資源管理器是添加到軟件工具箱中的有用工具。 免費版本的唯一限制是它不允許您連接多于三臺計算機。 如果這對您來說不是問題，那么它應該可以滿足您的需求。

Download Event Log Explorer from http://www.eventlogxp.com/.

從http://www.eventlogxp.com/下載事件日志資源管理器。

翻譯自: https://www.howtogeek.com/77645/look-up-event-ids-from-the-event-viewer-using-a-free-tool/

win7事件查看器事件id

總結

以上是生活随笔為你收集整理的win7事件查看器事件id_使用免费工具从事件查看器中查找事件ID的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。