Event ID 6005 — Start of Event Log service

Windows Event Log service started, often shortly after Windows was started.

Source of event

Event Log — System category.

Possible causes

Verifications to be carried out

Commands

Get-WinEvent -FilterHashtable @{LogName='System'; Id=6005} -MaxEvents 10

Key takeaways

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.