Event Log
The event log is a powerful diagnostic tool that, by default, centralizes critical and error events.
List view
This tab presents information about the log events present on the device. Filter the errors and only show those with Error
or Critical
severity. They are obtained from the device in ten-minute intervals. This time can be modified in the Workspaces settings.
The Event Log
section lists the event viewer events for Windows devices. By default, Workspaces only processes and displays in this section the critical and error events from the application, security, and system event logs.
The default view is for Today
, which starts at 12:00 p.m. in the time zone defined in the Workspaces instance. The time filter can be switched to the following values:
- Today
- This week
- This month
- This quarter
- This year
Filtering options
This view allows the same filtering functionalities available in Workspaces. An example would be filtering for an event with a specific ID to obtain a list of affected devices, and then applying corrective actions.
Event log information in Workspaces
In the details view of a Windows device, a tab is activated that groups the event logs for that device.
Detail view
The detail view of an event log contains all its information:
- Event Date: date the event log was recorded, in day and time format
- Level: severity level of the event
- Source: source of the event
- Event ID: numerical identifier of the event
- Log File: event log file that hosts the event
- Machine Name: hostname of the device logging the error
- Message: content of the event message
Additional event configuration
Users with an administrator role can add events that do not meet the default filtering conditions to, for example, add events with specific IDs that, although having an informational severity level, are relevant to the organization, as well as change the log update interval.