Windows Event Log - Windows Vista Service
This service manages events and event logs. It supports logging events, querying events, subscribing to events, archiving event logs, and managing event metadata. It can display events in both XML and plain text format. Stopping this service may compromise security and reliability of the system.
This service also exists in Windows 10, 11, 7, 8 and XP.
Startup Type
| Windows Vista edition | without SP | SP1 | SP2 |
|---|---|---|---|
| Starter | Automatic | Automatic | Automatic |
| Home Basic | Automatic | Automatic | Automatic |
| Home Premium | Automatic | Automatic | Automatic |
| Business | Automatic | Automatic | Automatic |
| Ultimate | Automatic | Automatic | Automatic |
Default Properties
| Display name: | Windows Event Log |
| Service name: | Eventlog |
| Type: | share |
| Path: | %WinDir%\System32\svchost.exe -k LocalServiceNetworkRestricted |
| Error control: | normal |
| Group: | Event Log |
| Object: | NT AUTHORITY\LocalService |
| Privileges: |
|
Default Behavior
The Windows Event Log service starts as NT AUTHORITY\LocalService and runs in a shared process of svchost.exe. If Windows Event Log fails to start, the error is recorded into the Event Log. Windows Vista startup proceeds, but a message box is displayed informing you that the Eventlog service has failed to start. If you disable this service, then 2 other services will be unable to start (see the "Dependencies" section below).
Dependencies
If the Windows Event Log is stopped, the following services will not start and initialize:
Restore Default Startup Type of Windows Event Log
Automated Restore
1. Select your Windows Vista edition and Service Pack, and then click on the Download button below.
2. Save the RestoreWindowsEventLogWindowsVista.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer to save changes.
Note. Make sure that the svchost.exe file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows Vista installation media.