Home > Event Id > Kernel-general Event Id 13

Kernel-general Event Id 13


The local computer m... Now thinking there's a BIOS/ACPI bug that turns the server off instead of rebooting it. –Chris S Dec 28 '11 at 15:05 humm.. All those "7036" are "the XXX service entered stopped state" Probably it does not explain anything, but this is the UserPnp event: Log Name: System Source: Microsoft-Windows-UserPnp Date: 28/12/2011 01:19:46 Event E.g. Check This Out

EDIT: Further research has revealed that PsLogList also appears to suffer from the same problem, whereas WEVTUTIL does not. I awoke the PC, and as it was coming back to life, I unwisely tried to move one software window from one monitor to the next (using Winsplit Revolution's CTRL+ALT+arrow hotkey) Providing you have the same login credentials on other computers on the network, it can get those too.I've attached it below, you'd need to modify it to accept parameters or edit windows boot shutdown logging share|improve this question asked Apr 30 '11 at 1:28 Will Martin 5313618 add a comment| 3 Answers 3 active oldest votes up vote 24 down vote accepted https://social.technet.microsoft.com/Forums/windows/en-US/2acc60f6-96cf-4b22-bf8a-5f733621332e/microsoftwindowskernelpower-error-system-shutdown-and-does-not-reboot?forum=w7itproperf

Kernel-general Event Id 13

Ultimate Australian Canal Circular Array Rotation Do we know exactly where Kirk will be born? MilesAhead Supporting MemberJoined in 2009 Posts: 7,301 Re: How can I find out what is restarting my PC automatically? « Reply #52 on: November 30, 2013, 02:19:20 PM » Pretty soon Event Xml:           7036     0     4     0     0     0x8080000000000000    

EDIT: Following suggestion by Windos, I tried get-winevent. Message ------- The system time has changed to ?2015?-?07?-?12T01:06:52.405000000Z from ?2015?-?07?-?12T01:05:51.764208900Z. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.Event Xml:41216300x800000000000000213269SystemJairules00x00x0Properties>Advanced System Settings> Startup and Recovery Settings> Disable "Automatically restart" Now the server didn't shutdown itself for a couple of days.

Do the same for system startup. –machineaddict Aug 13 '13 at 9:05 useful stuff... –khovanskiiªn Sep 9 '14 at 21:57 add a comment| up vote 1 down vote Coming Special header with logo in center of it How to find all macOS applications which are not from the App Store? If so, please temperarily disconnect the hard drive to see if it works. I hope it will stay working now for a while:) share|improve this answer edited Jun 4 '13 at 10:22 udo 232515 answered Jun 4 '13 at 7:49 John Schellingerhout 113 add

Here is a working example for XP: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=4226&EvtSrc=Tcpip&LCID=1033 As the code uses XML queries, I should include a WMI check in the Begin block to make sure that the targeted OS Shutdown Reason 5 Have you looked at the powercfg settings on the server? I tried to gather more relevant information about the reboot history using the following command: Get-EventLog -LogName System -Source 'Microsoft-Windows-Kernel-General', 'Microsoft-Windows-Kernel-Power','Microsoft-Windows-Power-Troubleshooter', 'Eventlog','User32' | Out-ExcelReport NB: the Out-ExcelReport function can be found Source: netvsc Type: Warning Description:VSP rejected attempt to use protocol version '3.2'. 1 Comment for event id 12 from source netvsc Source: Norton AntiVirus Type: Information Description:637 configuration options were changed.

  1. I then tried Get-WinEvent -ProviderName "Microsoft-Windows-Kernel-General" which produced the following error Could not retrieve information about the Microsoft-Windows-Kernel-General provider.
  2. Event Xml:           109     0     4     103     0     0x8000000000000004         5385    
  3. get-eventlog -logname system | ? { $_.source -eq "Microsoft-Windows-Kernel-General" } returns 8 entries, all of which have a message of the following form: The description for Event ID '12' in Source
  4. Equation system with two unknown variables What does the expression 'seven for seven thirty ' mean?
  5. It should be noted that when changing commands the 'Source' parameter is known as 'ProviderName' so your command becomes: Get-WinEvent -LogName System | Where { $_.ProviderName -eq 'Microsoft-Windows-Kernel-General' } share|improve this
  6. Join them; it only takes a minute: Sign up Get-EventLog - valid message missing for some event log sources up vote 4 down vote favorite I'm pulling and filtering System Event
  7. Ask !
  8. Event id 12 from source vmperf has no comments yet.
  9. The operating system is shutting down at system time ?2015?-?06?-?13T08:33:05.091743100Z.
  10. I'm in Australia, so my 'format' setting in Control Panel was 'English (Australia)'.

Kernel-power 109

You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. Both the 109 and 13 Event IDs can indicate a reboot. Kernel-general Event Id 13 I've found an ugly way to workaround this issue. Event Id 109 Task Category 103 The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them.

Open up Event Viewer, click Windows Logs -> System. his comment is here the last eventlog entry that day. Is it configured to shutdown on battery power if AC power is lost? –Ryan Ries Dec 28 '11 at 14:53 Is this a virtual machine? –gravyface Dec 28 '11 Login here! Shutdownactiontype

Electrical Propulsion Thrust Why do the physical properties of an egg shell change when the egg shell is exposed to vinegar for a week? The KB states: If you see that the computer generates a Stop error that contains a BugcheckCode value that is not reported in an event ID 41, modify the restart behavior Bruteforcing a keypad lock how to stop muting nearby strings or will my fingers reshape after some practice? "How are you spending your time on the computer?" Cost effective drivetrain maintanance this contact form This is the event sequence: Information 28/12/2011 01:19:50 Kernel-General 13 None Information 28/12/2011 01:19:49 Kernel-Power 109 (103) Information 28/12/2011 01:19:49 Service Control Manager 7036 None Information 28/12/2011 01:19:48 Service Control Manager

Click the following link to view the article in the Microsoft Knowledge Base: http://support.microsoft.com/kb/2028504 Regards,Magon Liu - MSFT Marked as answer by Magon LiuModerator Tuesday, June 08, 2010 3:21 AM Tuesday, Kernel-general 13 What are the benefits of an oral exam? Source: Oracle.xe Type: Warning Description:The description for Event ID ( 12 ) in Source ( Oracle.xe ) cannot be found.

Also, if someone pressed the power button that can initiate a graceful shutdown with many systems.

Hope our steps help to solve similar problems. The description for Event ID '13' in Source 'Microsoft-Windows-Kernel-General' cannot be found. If ($PSBoundParameters['Credential']) { $HT.credential = $Credential } If ($Computer -eq $Env:Computername) { $HT.remove('Credential') } Else { $HT += @{Computername = $Computer} } Write-Verbose -Message "Targeting computer $Computer" $HT += @{ ErrorAction 0x8000000000000004 Graphlex 4x5 Lens Hood and Filters - How Do They Mount?

Event ID: 12 Source: acpi Type: Error Description:AMLI: . Of course, if the problem disappeared you can safely assume that the adapter for the 3rd monitor is responsible for your troubles.The process of elimination is usually the best way to Sep 9 '13 at 11:14 add a comment| up vote 2 down vote Usually this is due to automatic updates. navigate here Please contact your system vendor for technical assistance. 3 Comments for event id 12 from source acpi Source: Cheyenne InocuLan Type: Information Description:Cheyenne AntiVirus was automatically updated with [38.00 Virus Signatures

Look for update messages in the event log from WindowsUpdateClient, for example: ... Fill in your details below or click an icon to log in: Email (required) (Address never made public) Name (required) Website You are commenting using your WordPress.com account. (LogOut/Change) You are UPDATE: There is no UPS. Related 1Is there a way to not allow shutting down of windows if people are logged in to the system?0Windows 7 shuts down on startup6How to force 'shutdown' at predefined time,

But, there is an easier way. TheEventId.Net for Splunk Add-onassumes thatSplunkis collecting information from Windows servers and workstation via the Splunk Universal Forwarder. Here's a screenshot of Windows 2008 R2 SP1: So, my idea was to get something between the Reliability monitor and the custom filtered view of the logs called ‘Administrative events'. I unplugged and replugged the DisplayPort to VGA Video Adapter Converter, but it didn't make a difference.

powershell event-log get-eventlog share|improve this question edited Jul 14 '15 at 5:11 asked Jul 14 '15 at 3:00 andyb 1,359511 add a comment| 1 Answer 1 active oldest votes up vote I don't hear all the usual reboot noises (fan etc.), it just seems to restart Windows somehow and asks me to log back on. What's the male version of "hottie"? SMF © 2016, Simple Machines and DonationCoder.com RSSMOBILE/WAP2 Tweet Translate Afrikaans Albanian Arabic Armenian Azerbaijani Basque Belarusian Bengali Bosnian Bulgarian Catalan Cebuano Chichewa Chinese Croatian Czech Danish Dutch English Esperanto Estonian

Visually speaking it's a very good built-in tool that relies on the RAC task. Event id 12 from source MSExchangeES has no comments yet. Can this number be written in (3^x) - 1 format? Bash remembers wrong path to an executable that was moved/deleted Is it possible to set a composite NOT NULL constraint in PostgreSQL Why are copper cables round?

Event Xml:           109     0     4     103     0     0x8000000000000004         5761