Windows Firewall Service Started

Enabled by default

Service: Microsoft Windows security auditing

Log type: Security

The Windows Firewall Service starting successfully is an indication that the service is functioning correctly and has started for a particular time period. Knowing that the service successfully came on line can help ensure that Windows Firewall is working as intended.

View Logs
Get-WinEvent -FilterHashTable @{LogName='Security';ID='5024'} -MaxEvents 1 | Format-List
Check Logging Status
Unfortunately, due to current limitations, we do not yet have this command, stay tuned for updates!
Disable Logging
Unfortunately, due to current limitations, we do not yet have this command, stay tuned for updates!
Enable Logging
Unfortunately, due to current limitations, we do not yet have this command, stay tuned for updates!
Language: PowerShell
Back to Windows

To view this log in the Event Viewer, open the event viewer and navigate to the Windows Logs heading and then the Security Tab. From here, select the find function and search for the value 5024 , or filter the log for the ID 5024.

To view this log in the command line with Get-WinEvent, open PowerShell as an administrator. From here, enter the command Get-WinEvent -FilterHashTable @{LogName='Security';ID='5024'} -MaxEvents 1 | Format-List

To view this log in the command line with wevtutil, open PowerShell or Command Prompt as an administrator. From here, enter the commandwevtutil qe Security "/q:*[System [(EventID=5024)]]" /f:text /c:1