Windows 10 Hibernation Event Log

My computer has been going into hibernation without any apparent cause. A reasonable guess would be a fan failed. I've launched SpeedFan, but unless I'm starring at it while an event happens, I don't think it will do me much good.
Does Windows 10 log the reason for hibernation? If yes, where do I look? If no, can this functionality be added?
I've looked at the system event viewer but was unable to make sense of it.
The hibernate events tend to happen while watching DirecTV Now.
I'm not sure it is hibernate. Here is what happens: The computer shuts down. I have to hit the power button to turn it back on. It takes much longer than waking from sleep to relaunch. Active programs are still open when the computer relaunches.
Thanks!

compupix said:

Does Windows 10 log the reason for hibernation? If yes, where do I look?

Event Viewer > Windows Logs > System. Look for Kernel-Power events. For an intentional hibernation when I closed my laptop lid it shows:

Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 03/01/2017 14:40:45
Event ID: 42
Task Category: (64)
Level: Information
...
Description:
The system is entering sleep.
Sleep Reason: Button or Lid

For a hibernation on the battery running flat it says:

...
Sleep Reason: Battery

Thanks Bree.
This is what I found:
Yesterday at 12:15 pm a master browser stopped: "The browser has forced an election on network \Device\NetBT_Tcpip_{D05968AA-8F35-43B6-8032-447944C9DD5E} because a master browser was stopped."
Also, an 'information' shows the reason for sleep as being "Battery."
I am using a desktop unit which is plugged into an APC battery. The battery currently shows as being 100%. I will double check the USB connections and keep an eye out for battery problems.

There are tons of errors resembling:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}
and APPID
{56BE716B-2F76-4DFA-8702-67AE10044F0B}
to the user DESKTOP-IQFLRIJ\Drew SID (S-1-5-21-3589270491-4234010041-3219396542-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

I don't know if those errors are related or significant.

compupix said:

I don't know if those errors are related or significant.

No, not related. The 'master browser was stopped' just means the machine on your network that was the master browser had been shut down. One PC on your network is the central repository that your PC queries to get the list of names for all machines that you see on the network. Only one PC can be the master browser, if it is turned off an election is called to find another to take its place. This is normal behaviour.

The pair of event IDs 10010 and 10016 for DistributedCOM errors are also unrelated and just about everyone seems to see them. Apparently they hav no ill effect and are safe to ignore. Error 10016 in Event Viewer

The 'reason for sleep: Battery' seems the significant one. Either your UPS battery is really having problems or the communication between it and the PC is faulty. If that's by a USB cable I'd unplug and reconnect it to make sure there's a clean contact.

I have had no problems since reseating both ends of the battery's USB cable.
Thanks Bree!

compupix said:

I have had no problems since reseating both ends of the battery's USB cable.
Thanks Bree!

Glad it helped. If only all problems were that easy to fix.:)