Windows Server: How to get the list of shutdown event

To get a list of shutdown event with date and time, we can take use of Event Viewer to filter Event ID: 41,1074,1076,6006 in System Event log

1. Open Event Viewer with Eventvwr.exe
2. Navigate to Windows Logs\System
3. Right-Click on it and select "Filter Current Log…"
4. Filter: Event log: System Event ID: 41,1074,1076,6006
5. When you filter them, you can track down its shutdown type, date and time, and who has shutdown it.

We can create custom view for quickly get a list as below: