Examkin

Question

Difficulty: EasyWindows Administrative and System Management Tools

A systems administrator needs to isolate Critical and Error event logs from the Windows System log for rapid review. In what sequence should the administrator perform the steps to create a persistent Custom View in Windows Event Viewer?

  1. 1Open the Event Viewer management console (eventvwr.msc) with elevated privileges.
  2. 2Select 'Create Custom View...' from the Actions pane on the right side of the window.
  3. 3Select the 'System' log source and check the 'Critical' and 'Error' event level boxes under the Filter tab.
  4. 4Click OK, enter a descriptive name for the view, and save it to the Custom Views folder.

Answer

The correct sequence is to open Event Viewer (eventvwr.msc), select 'Create Custom View...' from the Actions pane, configure the System log source with Critical and Error severity levels under the Filter tab, and save the custom view with a unique name.
To create a Custom View in Windows Event Viewer, an administrator must first launch eventvwr.msc, choose 'Create Custom View...' from the Actions pane, specify the log source (System) and event severity checkboxes (Critical/Error) within the Filter tab, and finish by assigning a name and saving the view under Custom Views.

Step-by-Step Solution

1
Launch Event Viewer console
Event Viewer interface opens with access to event logs and navigation trees.
Administrative utilities must be opened first to modify settings or views.
2
Initiate Custom View creation
The Create Custom View dialog box appears.
The Actions pane provides direct access to creation tools for event log filtering.
3
Configure log source and event severity filtering criteria
The custom view filter parameters are specified to display only System Critical and Error events.
Filtering settings determine which specific logged events are aggregated into the custom view.
4
Save and name the custom view configuration
The custom view is added under the Custom Views node in the left pane.
Saving persists the custom filter rule so administrators can quickly revisit filtered event logs.

Key Concept

Creating and managing Custom Views in Windows Event Viewer for system troubleshooting.
Rate this question

Topics

Windows Administrative and System Management Tools

More questions from this topic