Check for abnormal event logs on a Windows instance-阿里云帮助中心

You can find the cause of abnormal events by checking the system log of a Windows instance.

Background information

The system log of a Windows instance records information about hardware, software, and system events that indicate the operational status of Windows components.

Symptoms

Error messages in the event log of a Windows instance indicate that the instance may have experienced issues, such as blue screens or operating system crashes.

Solution

Check the Windows system event log for the event that corresponds to the error message. Then, analyze the event details to determine the cause. The procedure is as follows:

Note The following steps use Windows Server 2019 as an example. The steps may vary depending on the operating system of your instance.

Connect to the ECS instance remotely.
For more information, see Select a method to connect to an ECS instance.
Open Event Viewer.
1. In the lower-left corner of the Windows desktop, enter Event Viewer in the search box.
2. In the panel that appears, click Event Viewer.
  The Event Viewer opens.
Select Windows Logs > System.
In the list of system events, find the event that corresponds to the error and view its details to determine the cause.
The following figure shows the event details for a system crash and restart triggered by the NotMyFault tool.