| Details | |
| Product: | Windows Operating System |
| Event ID: | 6005 |
| Source: | EventLog |
| Version: | 5.2 |
| Symbolic Name: | EVENT_EventlogStarted |
| Message: | The Event log service was started. |
| Explanation | |
|
This event is written at system startup after the user initiates an expected restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. If the persistent Time Stamp group policy setting is either enabled or not configured, system information is written to the data section of this event. This information includes the name and version of the Windows Server 2003 operating system and the computer’s make and model. If any of the sources for this information are unavailable, or if their contents are unreadable, their corresponding fields display <unknown>. |
|
| User Action | |
|
No user action is required. |
|