This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.
|Windows 8 edition||Windows 8||Windows 8.1||Windows 8.1 Update 1|
|Display name:||Windows Event Log|
|Path:||%WinDir%\System32\svchost.exe -k LocalServiceNetworkRestricted|
The Windows Event Log service runs as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other services might run in the same process. If Windows Event Log fails to start, the error is logged. Windows 8 startup proceeds, but a message box is displayed informing you that the EventLog service has failed to start.
The following services are unable to start if Windows Event Log is stopped:
1. Select your Windows 8 release and edition, and then click on the Download button below.
2. Save the RestoreWindowsEventLogWindows8.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer.
Note. Make sure that the
svchost.exe file exists in the
%WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 8 installation media.