Support Get Quote

Critical Windows events
Event ID 6008: Unexpected system shutdown

Feb 10, 2022 6 min read

Event ID 6008: Unexpected system shutdown


Event ID 6008 gets logged to the system event log when a system shuts down unexpectedly. You will see the message "The previous system shutdown at time on date was unexpected."


Unexpected system shutdowns need to be investigated immediately when they happen to your critical servers as they can affect business continuity. The system shutdown might be caused by a hardware issue, such as overheating or power supply, but could also be a security threat .


Be instantly alerted with EventLog Analyzer when a critical system shuts down unexpectedly, so you can take immediate action to resolve the issue. The solution also gives you a wide range of predefined reports that help you audit other important Windows system events.

Real-time alerts

  1. Enhance security monitoring in EventLog Analyzer by setting up a custom alert profile for event ID 6008. Go to the Log360 console > SIEM > Alerts > Add Alert Profile > select Alert > select Event ID from the drop-down > select Equals and add 6008.
  2. Add other details like the alert name, severity, and log sources. Include the device name, user account, and domain in the alert message and enable notifications.
  3. The security admin getting the notifications can use the details in the alert message to check if this event was logged multiple times in the same system.
  • Unexpected system shutdown
  • Unexpected system shutdown
  • Unexpected system shutdown

You may also like


Interested in a
log management

Try EventLog Analyzer
Network devices

How to check your Cisco switch logs?

Read more
Previous articles
Next articles
Network devices

Critical Windows events: Event ID 7031 - Service crash

Read more



Manage logs, comply with IT regulations, and mitigate security threats.

Seamlessly collect, monitor, and analyze
logs with EventLog Analyzer

Your request for a demo has been submitted successfully

Our support technicians will get back to you at the earliest.

By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

  Zoho Corporation Pvt. Ltd. All rights reserved.

Link copied, now you can start sharing