WiFi response difference between two similar machines

Paul,

Pavl said:

Had exported to csv before as you suggested but was having fun with Excel time format.
Was previously able to do time calculations with the othe csv log files but seem to be missing something this time.

I exported my own Event viewer results as csv so I could open them in Excel.
In Excel, I saved them as xlsx straightaway so I would not lose any formatting etc when I saved again later on.

I was able to
Select the whole of the date-time column,
Format cells,
Custom,
yyyymmdd hhmmss
and it did what it was told.
- They remain recognised as date-time cells.
- I could have chosen other formats but I like yyyymmdd hhmmss [i.e. biggest to smallest]

I added a column G and wrote Result in its first row. Then I wrote
=RIGHT(F2,LEN(F2)-27)
in the row 2 entry, checked it was giving me the correctly tidied-up answer [true/false only without the rest of the text]
and then copied or dragged the formula into all column G cells [naturally, it self-adjusted its row references as it went down the column].

I then set columns A, C-F to column width 0.1 so the only ones that matter [B, G] were more readily viewable.
- I prefer column width 0.1 to hiding columns. It has the same effect yet does not risk things going wrong if I later paste more results onto the end of it.


-


If your monitoring computer is on & awake the whole time, I think these results are better than you would get from any script you ran.
I was wrong to think these results would be awkward - they are only awkward in my case because, as you can see from my results, I have lots of internet connection changes every day because of how I work.
I turn my computer off or sleep it several times a day and I disconnect the internet if I'm not actively using it, if I connect a backup drive to any computer or if I connect the USB with my password database on it. The 083527 entry from this morning, for example, was straight after I had restarted the computer.



Denis

Thanks again Denis

Have given the event viewer some time to refill after clearing it.
Just checked that "enable logging " is ticked and that the max log size is at default of 1028 KB.

Microsoft-Windows-UniversalTelemetryClient/Operational filtered for 55
Contains zero entries.........

Despite there being over twenty disconnects in time since clearing the log.
All this is on the main machine which is not doing the logging but still suffering the interrupts of course.

And thanks for the nice "len" bit to strip off the first 27 chars .... i had been trying to grab the last 5 !

So I seem to be in limbo at the moment.

Paul

EDIT:
Just checked event viewer on other machine and it also has events from a year ago.
No record of the current bunch.

Pavl said:

Despite there being over twenty disconnects in time since clearing the log. Just checked event viewer on other machine and it also has events from a year ago.

Paul,

I still do not understand why you have EventID 55 records from last year & why this is the case on two computers.
Event viewer tidies up its event logs by size rather than by date but still ...
I have some other EventIDs dating back a year but not these.

There should be an EventID 55 for every time that your Taskbar Notn area [SysTray] network icon changes from having an internet connection & not having one.
Is that icon changing?

What 'tailoring' have you done on your Windows? Any Services disabled, for example?

Denis

Thank you Denis

Yes, the icon does change.
And yes, there were some early tinkorings done from Brinks posts plus something else called Glary utilities.
Hard to remember which bits are changed.
Going for a look now ..........
Paul

EDIT:
Ah yes, think I may have found it.
Looked at O&O shutup10 and ran it from a new download.
Must have done this earlier ...... but memory not to good now.
Looked at the list and found ...
Windows Error Reporting = advised as disabled ... so I must have chosen that earlier as it is marked in green.

- - - Updated - - -

And going down the list ....

Disable Network Connectivity Status Indicator is still on/functional/ not disabled.

Disable diagnostic log collection is still functional / ie log collection still functional.

Should I be looking at other services specifically ?

So now ........
Looking at all services every one that starts with "Network" is either auto or manual with six currently running.

If the icon is changing, Windows knows it has been connected so EventID 55 ought to be generated.
I don't know why it is not.

In Event viewer, Custom views, Administrative events -
- it takes a while to populate because it is actually a list of all events
Are you getting any events added to that list?

I have never had to deal with an Event viewer that fails to log events.

Denis

Pavl said:

Most seem to be warnings.

Yes, so are mine.
It was just a suitable view to suggest you looked at so I should have warned you to keep your eyes closed while you were looking at it.
That's true of much Event viewer use.
- Event logs are a useful source of data when investigating issues for which symptoms have been observed.
- Event logs are not necessarily a reason to think that a fault exists.

I don't understand why you are not getting EventID 55 records.
- I assume you imported the definition I sent you and have not altered its definition.
That's why I wondered if any of your tinkering might be affecting it. I don't know the utilities you mentioned.

I'm at a loss about what to suggest,
Denis

Pavl said:

My other machine continues to log 24/7 and overnight there are no disconnects ..
This makes me think that my logging is not disrupting traffic.

I thought the other one was just doing proper jobs and this on was just doing logging.

I do not have fibre [my mobile phone has been my internet connection for twenty years] but I thought I had seen an explanation that, in general, the long distance hop is done by fibre but the last few feet are over copper wire.
In my case, that would mean from the telegraph pole outside my house across to my roof [and down into my hallway then across to the other rooms].

Perhaps when you update to 21H2, or the apparently imminent 22H2, your event logging will sort itself out.
- I would suggest doing your next Version upgrade by Repair install [aka In-place upgrade] from the downloaded ISO to give it a chance of sorting things out for you.
Repair Install - TenForumsTutorials
- Oh. Ah.
- Do you have an alternative ISP such as a generous mobile phone data allowance?

Denis

Hello @Pavl,

I don't know if this will help, but it will list ALL the WinEvent - ID55 entries.

Copy & Paste the following command[s] into a CMD Prompt and press Enter. It will create a WinEvent_55.log file on your Desktop. If you have a relocated Desktop, then change the output Path accordingly.

Code:

PowerShell "Get-WinEvent -FilterHashtable @{LogName='System'; Id=55} -ErrorAction 'SilentlyContinue' | Format-Table ProviderName, TimeCreated, RecordID, LevelDisplayName, Id, Message -Autosize | Out-String -Width 1000" > %UserProfile%\Desktop\WinEvent_55.log

I hope this helps.