Table of contents
foreword
Recently, for some reasons, the author wanted to check the daily on/off time record of his computer, but he didn’t know how to check it, so he searched the relevant checking methods on the Internet, and finally sorted out how to check the on/off time of the computer in this article, and shared it with everyone .
1. Open the management
Right click on This PC, click Manage
2. Open Event Viewer
A dialog box pops up to open the Event Viewer.
Tip: You can also use the "Win+R" key to open the "Run" window, enter the "compmgmt.msc" command and press Enter;
3. Open the windows log
Open the windows log, find [System] under it, and click [System]. Then wait for a while and the recent computer events will appear on the right, as shown in the figure below:
4. There are too many logs in it. How can we quickly query the logs of the shutdown time? We can also select the system and click on the right to filter the current log.
5. Get the boot event
A dialog box pops up, enter 6005 in the ID number column , which means to get the boot time, confirm.
6. Get the shutdown event
A dialog box pops up, enter 6006 in the ID number column , which means to get the boot time, confirm.
In this way, all the power-on and power-off times are displayed.
7. Save events
Here we can save all events, [Save all events as]
8. Save the event file
Select the save directory to save the event.
9. Open the event file
The saved event file is evtx.
What is the file format of evtx?
`.evtx` is the extension for Windows event log files, these files usually contain operating information of the system or application, such as system warnings, errors, informational events, etc. These files are primarily used by system administrators for troubleshooting and system monitoring.
.
How to view files with the extension .evtx?
`.evtx` files are binary files, so opening them directly with a text editor will not reveal useful information. There are third-party tools, such as NirSoft's MyEventViewer or Log Parser, that can parse `.evtx` files and display events in a more human-readable format. Here is a recommendation for everyone to test by themselves, download: https://jum.lanzoul.com/iSwjY0zi35da
later words
Let's try it according to the tutorial compiled by the editor. You are also welcome to give your opinions and suggestions, and learn together and make progress together.
Finally, share the commonly used commands on the computer:
1. Open the operation method/step;
Bring up the running command window: press the shortcut key "win+R"; click "Start"->Windows System->Run
2. Shortcut command
1. CMD command prompt: Enter the command "cmd" and press Enter, as shown in the figure below:
2. Registry: Enter the command "regedit" and press Enter, as shown in the figure below:
3. Open the drawing tool: enter the command "mspaint" and press Enter, as shown in the figure below:
4. Calculator: Enter the command "Calc" and press Enter, as shown in the figure below:
5. Notepad: Enter the command "Notepad" and press Enter, as shown in the figure below:
6. Check the Windows version: Enter the command "winver" and press Enter, as shown in the figure below:
7. Task Manager: Enter the command "taskmgr" and press Enter, as shown in the figure below:
8. Group Policy: Enter the command "gpedit.msc" and press Enter, as shown in the figure below:
9. System configuration: Enter the command "Msconfig" and press Enter, as shown in the figure below:
10. Services: Enter the command "services.msc" and press Enter, as shown in the figure below:
11. Local account management: Enter the command "lusrmgr.msc" and press Enter, as shown in the figure below:
11. Local account management: Enter the command "lusrmgr.msc" and press Enter, as shown in the figure below:
12. Disk defragmentation: Enter the command "cleanmgr" and press Enter, as shown in the figure below:
13. Console: Enter the command "mmc" and press Enter, as shown in the figure below:
14. Device Manager: Enter the command "devmgmt.msc" and press Enter, as shown in the figure below:
15. NT Disk Manager: Enter the command "diskmgmt.msc" and press Enter, as shown in the figure below:
16. Computer management: Enter the command "compmgmt.msc" and press Enter, as shown in the figure below:
18. ODBC data source manager: Enter the command "" and press Enter, the interface is as follows:
19. Enter the command "mstsc" for remote desktop connection and press Enter, as shown in the figure below:
