View Shutdown Event Tracker logs under Windows Server 2008 R2

I'm trying to view the Shutdown Event Tracker logs in the Event Viewer, on windows server 2008 r8, but I can't find the messages that I supplied when previously restart the server.

Where in the Event Viewer can I see these logs?

Solution

Open event viewer. Expand windows logs. Click system, then either find or filter for event ID 1074. And you will see all your shut down logs.

Comments (5)

+0 – thanks, that's very handy. Windows doesn't make it easy to navigate the logs without knowing what you're looking for — May 23, 2011 at 08:57
+0 – You need to also include 1076 (Unplanned shutdown) and filter for source user32 — Mar 27, 2012 at 18:52
+9 – Also event 6008 "Unexpected Shutdown" might be interesting... — Jul 26, 2013 at 07:56
+0 – @Jacob, How do you get the list of event IDs and what they represent? — Jul 30, 2015 at 11:43
+1 – @Pacerier Good luck with that....but here's a start: eventid.net — May 02, 2016 at 17:28

References

https://serverfault.com/questions/204417