Hi Guys,

Willing to track all critical event IDs of windows server 2003/2008 server which can cause and provide information in any monitoring tool. regarding server got hung/failed/reboot/shut-down /currently in outage stage. Also very critical Events which have to monitor.

Thanks in advance.

Following discussions should help

Critical Event ids in Windows 2008 to be monitored 

http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/6b975a50-1515-411d-8ff9-bcb10f6d3ad3 

Required critical Events & Services to monitered for Win. Servers.  

http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e86d01c6-ad94-46ba-8256-1c534c1ec17a 

List of Windows Server 2003 Events 

http://blogs.msdn.com/b/ericfitz/archive/2007/10/12/list-of-windows-server-2003-events.aspx

Hello Manish,

Apart from Santhosh's reply, in short we need to monitor below event IDs in event Viewer.

Event ID:1074 &1076 soure:User32--- For planned reboot

Event ID:6008 soure:EventLog---Unexpcted Shutdown

Dears,

Kindly Share the critical event ID list of windows server 2012 standard and also windows server 2012 Hyper-v critical event list which are required to monitor.

Regards,

UQ

Hi Manish

Server Hung/Failed state: Event ID:2020  The server was unable to allocate from the system paged pool because the pool was empty.(When your server is under a heavy load,indicates that the server is out of paged pool memory:

Use this Microsoft article to fix this issue:https://support.microsoft.com/en-us/kb/312362

Shut down Event ID: you can filter 1074 Event ID

planned rebooted Event ID:1074 &1076 soure:User32-

Event ID:6008 soure:EventLog---Unexpcted Shutdown. or it might be power failure. or hard reboot

Thanks & Reg

Sharanappa Y E

• Proposed as answer by Sharanappa Y E 1 hour 33 minutes ago