Startup / Shutdown Log File (WinXP Pro SP2)

Topic

New Reply

This is a rather simple question.

I know (because I seldom stumble upon it) there’s a file in which Windows logs the time of the last startup and the time of the last shutdown, or something like that.
Anyone knows the name of the file?

Thank you in advance.

Reply | Quote

Replies

On my XP Pro system there is a file in the C:Windows folder called WindowsUpdate.log that might be what you’re asking about. I’m not sure. Since I normally reboot every morning this file seems to keep track of that.

Reply | Quote

Hi Al,

I believe the log I was looking for had a different look, but I might find a good use for this one…
Thanks!

Reply | Quote

If you look at the System Event Log with Event Viewer, you will find that Event # 6006 is the (normal!) shutdown record and Event #s 6009 and 6005 are the startup records. If you just lost power or didn’t shut down properly, then there won’t be a shutdown record. The “Source” of all of these records is “eventlog”.

John

Reply | Quote

Hello John,

Thanks for the info. I didn’t even know there was an Event Viewer!! Does it make use of the WindowsUpdate.log file Al mentioned? It doesn’t seem to, since I can’t find a #6006 normal shutdown code entry in the log whereas there IS a shutdown entry in the Event Viewer.
I think I’ll definitely manage using the Event Viewer.

Thank you!!

Reply | Quote

My WindowsUpdate.log has entries dated 2005-05-11, and there are no other dates!

There are a number of programs around to process the event log (e.g. PsLogList), or you can use Filters in Event Viewer itself.

John

Reply | Quote