Use Network troubleshooter event logs to solve network problems

You must be logged on as an administrator to perform these steps.

When you run the Network troubleshooter, any problem found, along with any solution, is displayed in the Network troubleshooter dialog box. If more detailed or technical information about the problem and potential solutions is available, it's saved in one or more event logs. Network administrators and technical support personnel can use the information in the event logs to analyze connectivity problems or help implement the solutions.

For example, to verify your Internet connection by using the Network troubleshooter:

  • Open the Network troubleshooter by right-clicking the network icon in the notification area, and then clicking Troubleshoot problems.

You can see the Network troubleshooter event logs in Event Viewer. The event logs are saved as system events in the Windows Logs folder with an Event ID of 6100.

  1. Open Event Viewer by clicking the Start button Picture of the Start button, clicking Control Panel, clicking System and Security, clicking Administrative Tools, and then double-clicking Event Viewer.  Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

    The events should be filtered so that only events from the Network troubleshooter are shown.

  2. To open an event, double-click it.

Working with diagnostic events

When the Network troubleshooter identifies a network problem, it saves information in the event logs as either helper class events or informational events. There can be one or more helper class events per troubleshooting session, but only one informational event per session.

  • Helper class events. These events provide a summary of the diagnostic results and can repeat some information displayed in the Network troubleshooter dialog box, but they can also provide additional information for troubleshooting, such as information about the connection that was diagnosed, diagnostic results, and the capabilities of the network and the adapter being diagnosed.

  • Informational events. These events can include information about the connection that was diagnosed, the network settings on the computer and the network, visible networks and routers or access points in range at the time of diagnosis, the computer's preferred wireless network list (if applicable), connection history, and connection statistics such as packet statistics and roaming history. They also provide a summary of the connection attempts and their status, and what phases of the connection (such as pre-association, association, and security setup for a wireless network connection) succeeded, failed, or didn't start.