Windows Power and Boot EventIDs

 

1. EventID 41: System Log It shows that your Windows computer rebooted without shutting down completely.

2. EventID 6005: System Log Source EventLog It indicates that the event log service was started.

3. EventID 1074: System Log Source User32 Your computer records this event when an application forces your laptop to shut down or restart. This event also helps you know when a user restarted or shut down the computer from the Start menu or by using CTRL+ALT+DEL.

from:

https://manage.accuwebhosting.com/knowledgebase/3897/How-to-check-shutdown-and-reboot-logs-in-Windows-servers.html#:~:text=Event%20ID%206005%3A%20It%20indicates,using%20CTRL%2BALT%2BDEL.

EventID 13: System Log The OS is shutting down

EventID 12: System Log The OS is starting

EventID 6006: System Log Source EventLog It indicates that the event log service is stopping. This is indicative of a shutdown/restart.

keywords
Event Log