Cadzow Knowledgebase

Contact Us

Site Search

Remote Support

Print Friendly

How To Determine System Startups from Event Log

When shutting down and starting, Microsoft Windows logs events in the Event Log.

Although there are a variety of events which signify startup and shutdown, the simplest to check for startups is to filter by Event Id 6009 in the System log.

Event Id 6008 is logged when the previous shutdown was unexected (“dirty shutdown”).

See also:

Copyright © 1996-2023 Cadzow TECH Pty. Ltd. All rights reserved.
Information and prices contained in this website may change without notice. Terms of use.

Question/comment about this page? Please email