EventLog 6008: What supplies the shutdown time?

  • Thread starter Thread starter jwgoerlich
  • Start date Start date
J

jwgoerlich

Hello,

I am certain everyone is familiar with Event ID 6008: The previous
system shutdown at (time) on (date) was unexpected. My question is
where do the time and date values come from?

I ask because we have had servers incorrectly report this time. For
example, I have an RDP session into the server. The time on the systray
reads 11:00 AM. The server unexpectedly shuts down and the consequent
event log entry is, say, 10:45 AM. The value reported does not seem to
match the reality.

Thanks in advance,

J Wolfgang Goerlich
 
Back
Top