Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

Critical system events requiring immediate attention are usually
displayed in a pop-up alert or warning box on the screen of the
server. If the event is significant but doesn't
require immediate attention, the event is logged instead to the
System or Application log.

If you suspect your problem is hardware-related, filter your System
log to show only those events generated by that component.

If you right-click on an event log Clear All Events, you
can wipe out all the events in the log. The exception is the Security
log: if you clear the events in this log, a single new event is
generated in the log that records the user who cleared the Security
log. You can't cover your tracks that easily!

You can also use archived security logs to track resource-usage
trends over time to help in planning for hardware and software
upgrades on your network.

See Also

Auditing , eventquery