25

Imagine your computer is doing strange things regarding turning on, off, sleeping, hibernating, restart, being on in the morning when you set it to sleep in the evening before and similar things.

I assume these "events" are somewhere in the Event Log / Viewer, but I couldn't find a real "filter" to show only events of these types.

How can I display only these specific events instead of manually sifting through thousands of events?

janpio
  • 2,856

4 Answers4

46

I think you also get what you want by running the following command (elevation required):

The command takes approximately 1 min to run for last 3 days (default).

>>> powercfg /sleepstudy
Sleep Study report saved to file path C:\Windows\system32\sleepstudy-report.html.

from comments: Use /duration 7 for more up to 28 days. It takes about 4 minutes+ to run for the last 28 days.

The report should contain all sleep, hibernate, shutdown related events and some other related information:

laptop sleep study

Note: also you might be interested in what powercfg /systemsleepdiagnostics generates.

Alexei
  • 773
6

to get all such events and uptimes i used this tool: https://www.nirsoft.net/utils/computer_turned_on_times.html screenshot from author

posted in the same thread: https://softwarerecs.stackexchange.com/a/52443/40730

ya_dimon
  • 201
0

One workaround that at least shows the times of start and shutdown would be to look at the event logs created by the event logging service itself:

https://softwarerecs.stackexchange.com/a/10541/34583

Unfortunately it doesn't say anything about the type of shutdown, reason for start or shutdown, etc.

janpio
  • 2,856
-1

I am having these troubles with an HP laptop I use to leave in hibernation. In addition to @Alexei's answer (I am frightened after finding the much higher than I expected frequency of the overnight activity of my computer...), I found some help in the approach by @MarkCarr here:

Hibernating laptop randomly wakes up and stays on when lid is closed

So you must "use the Event Viewer. Open the Windows System Log, choose Filter Current Log, and in Event Source find the Power-Troubleshooter option". However, you can make it faster:

enter image description here

Instead of filtering each time, create your own view, or even export it once it's been created.