How to Check Network Disconnection Events in Windows Event Logs

Checking for Network Disconnects in Event Viewer

1. Open Event Viewer by searching for it in the Windows search bar.

2. In the right panel, click Create Custom View.

3. In the Create Custom View window, check both Warning and Information boxes.

4. Ensure By log is selected, then expand the Event Logs dropdown and select Windows Logs and Applications and Services Logs.

5. In the Event ID field, enter 27, 10000, then click OK to save the custom view.

• Event ID 27 indicates a network adapter disconnect, which may be due to hardware failure, driver issues, or configuration changes.

• Event ID 10000 is related to DistributedCOM (DCOM), signaling network communication errors or permission issues.

6. If prompted about memory or processor usage, click Yes to proceed.

7. Assign a name to your custom view.

8. Review the logs:

• If no network disconnects occurred, no warnings will be displayed.

• If warnings appear, they indicate a network disconnection.

9. Compare the timestamps of the warnings in Event Viewer with your trading platform’s logs:

• If the timestamps match, the disconnect was due to a network failure.

• If they do not match, the issue likely occurred between your trading platform and broker’s server.

If the warning timestamps in Event Viewer align with your trading platform’s logs, the disconnect was caused by a network failure. However, if the timestamps do not match, the issue occurred between your trading platform and your broker’s server.