Skip to main content
Version: 24.10

Event Log

The event log is a powerful diagnostic tool that, by default, centralizes critical and error events.

List view​

This tab presents information about the log events present on the device. By default, it filters the errors and only shows those errors with Error or Critical severity and retrieves them from the device at ten-minute intervals. This time can be modified in the Workspaces settings.

The Event Log section lists the event viewer events for Windows devices. By default, Workspaces only processes and displays in this section the critical and error events from the application, security, and system event logs.

eventlog

The default view is for Today, which starts at 12:00 p.m. in the time zone defined in the Workspaces instance. The time filter can be switched to the following values:

  • Today
  • This week
  • This month
  • This quarter
  • This year

Filtering options​

This view allows the same filtering functionalities available in Workspaces. An example would be filtering for an event with a specific ID to obtain a list of affected devices, and then applying corrective actions.

Event log information in Workspaces​

tabevent In the details view of a Windows device, a tab is activated that groups the event logs for that device.

Detail view​

The detail view of an event log contains all its information:

  • Event Date: date the event log was recorded, in day and time format
  • Level: severity level of the event
  • Source: source of the event
  • Event ID: numerical identifier of the event
  • Log File: event log file that hosts the event
  • Machine Name: hostname of the device logging the error
  • Message: content of the event message

Additional event configuration​

Users with an administrator role can add events that do not meet the default filtering conditions to, for example, add events with specific IDs that, although having an informational severity level, are relevant to the organization, as well as change the log update interval.