Event ID 109 Inquiry on EventData value in details tab

Question

The server suddenly shut down, so I checked the event viewer and there was 1074 right after 109. Here, EventData contains ShutdownActionType, ShutdownEventCode, and ShutdownReason, but I don't know what the numbers mean.

ShutdownActionType: 6

ShutdownEventCode: 16

ShutdownReason : 0

If you know what it means, please reply or tell me the mapped site.

Answer 1

Hello The numbers you provided are codes that correspond to specific types of shutdown events in Windows. Here’s what they mean:   ShutdownActionType: 6 - This code typically indicates that the shutdown was triggered by an application or a user.   ShutdownEventCode: 16 - This code is a bit more complex. While I couldn’t find a direct mapping for this specific code, Event ID 1074 is generally logged when a user initiates a system restart or shutdown, or an application causes the system to restart.   ShutdownReason: 0 - This code usually signifies that the shutdown was planned.   Please note that these are general interpretations and the exact meanings can vary based on the context and the specific system configuration. If you continue to experience issues with unexpected shutdowns, it may be helpful to consult with a system administrator or IT professional. They can provide more detailed insights based on your specific system setup and the full event logs.   Best Regards, Wesley Li

If the Answer is helpful, please click "Accept Answer" and upvote it.