Start and shutdown log Windows 10

Question

I would like to check when my PC started, I read about event log id 6006 and 6005 to check the log service start up and shutdown event... but this method doesn't work.

The last eventlog service restart was made 1 month ago, but I'm sure my PC is shutted down daily and I'm sure I made "shut down" and not "suspend"!

Why I cannot find this log? How can I see when my PC started up or shut down?

Solution 1

At last my issue was the hybrid windows shutdown:

https://www.howtogeek.com/243901/the-pros-and-cons-of-windows-10s-fast-startup-mode/

With this option on (windows default) the service doesn't start at every windows startup. This is the cause of logs lack.

Solution 2

I found an alternative answer, for those who want to keep Fast-Restart ON.

event viewer->system-> Filter this log -> now filter on :
- events : 1, 42 ( 1= system time has changed=startup /42= system is entering sleep)
- Event Sources : Kernel-General, Kernel-Power (you'll get task category 5/64)

the only miss in the log is when you just close the lid without 'shutdown' this is also logged

Comments

[MOnsDaR]

Having the same issue... 6005 and 6006 are logged just every now and then. Same for all the other IDs I can find when searching for this issue... Seems to be an exception though, as everyone is recommending the same IDs and nobody has issues like us.

[Tobia]

Please see the answer to myself

[MOnsDaR]

I found that the tool ComputerTurnedOnTimes from NirSoft does the job. Seems it uses the EventLog too, as the results are similar, though it is able to give me correct results: nirsoft.net/utils/computer_turned_on_times.html

[Alex]

I can confirm this works in Windows 10. Thanks!