Share via

Network Connection Event Logs

Anonymous
2018-08-06T14:30:06+00:00

I'm running Windows 10 Pro on a desktop with an ethernet cable (not wi-fi) for connection to the internet. I would like to open some event log somewhere, then disconnect/reconnect my ethernet cable (causing a disconnection/reconnection to the internet) and see this event show up in that log (after a refresh, of course). But where can I see this? I am familiar with Windows 10 Event Viewer and have experimented with many different logs in many different categories to no avail. Surely Windows must log this event somewhere. I can't find anyone else who has asked this question and gotten a definitive answer.

Windows for home | Windows 10 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2019-01-17T17:38:29+00:00

    I would like to open some event log somewhere, then disconnect/reconnect my ethernet cable (causing a disconnection/reconnection to the internet) and see this event show up in that log...

    On my Windows 10 1809 machine I can see this in three places.

    The most straightforward event is in the Applications and Services Logs/Microsoft/Windows/NetworkProfile log.  There is a EventId 4004  "Network State Change Event" that fires whenever a network connection is made or re-identified.

    There are less straightforward events in the NCSI log.  The EventId 4042 Capability change tells you that this network discovery tool woke up and tried to figure out if you were on a real internet connection, on a domain network, or stuck behind a captive portal.

    Last but not least, if you (don't have a static Ip address and) enable the DHCP/Operational log you can see Media State Events when a physical interface state changes as well as requests for IPs, address assignment, duplicate address checking, etc.  This log is much easier to read if you filter out some of the noise events with the event id filter -50091-50094.

    (I work as a PFE for Microsoft Supporting Enterprise customers.  Please don't hold that against me.)

    200+ people found this answer helpful.
    0 comments

11 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-08-06T16:17:30+00:00

    Thank you for your quick reply. This all looks like good advice to repair a computer, but mine's not broken. I want to leave the computer unattended for a while, come back later and see if and when I lost (wired) connection to the internet. Unplugging the ethernet cable while watching an event viewer seems to be a positive way to test my ability to do this. Perhaps there is a small app or script.

    8 people found this answer helpful.
    0 comments
  2. Anonymous
    2019-01-20T07:08:46+00:00

    Good work, Elizabeth Greene.  I've only tested the first log, but it gave me the information I was looking for.  I have roomers who were complaining that they lost internet connection periodically, so I needed a tool to verify this and help analyze the problem.  Thank-you.

    Glad to help.  These same logs exist on Windows 7 too, if you have any old kit to work on.  The trick with the older OS is to Select View >> Enable Diagnostic and Analytic logs and then right-click >> Enable the logs to be able to capture the detailed information.

    Best of luck!

    7 people found this answer helpful.
    0 comments
  3. Anonymous
    2018-10-29T23:41:16+00:00

    Does this log, once enabled help:

    Microsoft-Windows-NetworkStatus/Analytic

    I.e in the Event Viewer navigate to:

    Applications and Services Logs

     - Microsoft

       - Windows

        - NetworkStatus

          - Analytics (disabled by default but can be enabled)

         -

    4 people found this answer helpful.
    0 comments
  4. Anonymous
    2018-08-06T15:38:52+00:00

    Hi, roybillstrom

    You should check your network cable and its connections and check that they are working well, after these, check these links:

    https://www.rizonesoft.com/downloads/complete-i...

    https://www.rizonesoft.com/downloads/winsock-re...

    If that does not work, follow these steps:

    Press the Start key and type the word CMD, right click on the command prompt and select Run as administrator, enter the following commands one by one followed by the Enter key:

    Sfc / Scannow

    DISM.exe / Online / Cleanup-image / Scanhealth

    DISM.exe / Online / Cleanup-image / Restorehealth

    The execution of these processes may be delayed, do not forget to restart the computer to apply changes.

    If it works, follow these others.

    Any corrupt DLL files are best performed using built in utilities or using a repair upgrade method:

    Open Start, type: CMD

    Right click CMD

    Click Run as administrator

    Type in at the prompt OR Copy and Paste these one at a time : (Hit enter after each)

    Dism /Online /Cleanup-Image /CheckHealth

    Dism /Online /Cleanup-Image /ScanHealth

    Dism /Online /Cleanup-Image /RestoreHealth

    Also run the System File Checker utility:

    Open Start, type: CMD

    Right click CMD

    Click Run as administrator

    At the Command Prompt, type: sfc/scannow

    This will check for any integrity violations

    Restart your system

    2 people found this answer helpful.
    0 comments