IT Toolbox
IT Toolbox

Event ID 6005 — Start of Event Log service

TopicWindows Server →
View my favorites

Windows Event Log service started, often shortly after Windows was started.

Source of event

Event Log — System category.

Possible causes

  • Normal system start
  • Service restart

Verifications to be carried out

  1. Compare with events 6006, 6008 and 1074
  2. Use time to reconstitute the timeline

Useful orders….

Get-WinEvent -FilterHashtable @{LogName='System'; Id=6005} -MaxEvents 10

To be retained….

An Event ID must always be interpreted with its source, its full message, its timing and the context of the system. The same number may exist in several providers of events.

♡ 0