WiFi response difference between two similar machines

Paul - Paul is not getting any EventID 55 events recorded.

Paul - If you try Paul's suggestion and it works then it indicates that you have an error in Event viewer itself rather than in event logging. In that case I suggest you download NirSoft FullEventLogView as it reads event logs directly so would act as an alternative.
- I use it in conjunction with Event viewer because its single chronological view contrasts so much with what I've set up in Event viewer's Custom views.
- I think it will be unwieldy on its own but it's better than a kick up the rse.

Denis

Paul1,

To filter the results to mimic the Event viewer, Custom view:-

NirSoft FullEventLogView, Options, Advanced options
then set these two parameters

EventID 55
Log ["Channel"] Microsoft-Windows-UniversalTelemetryClient/Operational

If this works then you are back in business for simply having to export results once a day [or whenever you wish].

Do let me know if the results show up,
Denis

Paul,

The right-hand one was Event viewer. I thought it would help you see that I was just suggesting the same 'Custom view' that I had done before [for Event viewer].
The left-hand one is all you need to set up in the Nirsoft one.

1 Please confirm that you are seeing the results in the Nirsoft tool.
- You do not need to auto-refesh it for now.

2 You can also run a single line command to export its results.
- Once you can see the results in the Nirsoft tool, you know that it works.
Now close it.
Run this command but change
- - the path of the Nirsoft tool to wherever you've stuck it [in place of my C:\Tools\External\NirSoft\FullEventLogView\x64]
- - the path of the output file to wherever you want it [in place of my D:\Desktop]

Code:

C:\Tools\External\NirSoft\FullEventLogView\x64\FullEventLogView.exe /EventIDFilter 2 /EventIDFilterStr "55" /ChannelFilter 2 /ChannelFilterStr "Microsoft-Windows-UniversalTelemetryClient/Operational" /scomma "D:\Desktop\EventID55Log.csv"

Then you'll be able to open that file in Excel to see the records you want.
- It defaults to records for the last week but that can be adjusted if you need to.

Your last comment above makes me think you are not seeing those events.
But you were in Powershell, which reads the same logs.


Denis

Paul,

Here are my results from running that command on the NirSoft tool, opened in Excel then formatted, sorted into most recent first & with a results formula in the extra [green] column just like I showed you before but this time the formula checks the G column
=RIGHT(G2,LEN(G2)-27)


My careless reformatting messed up the time cells in this list.


Denis

Sadly nothing in FullEventViewer window nor the standard event viewer either.
Just done a re-run of Paul Black's code and noted ......... they are all thus ...... with this example being the most recent.
Microsoft-Windows-Kernel-Processor-Power 15/09/2022 15:25:43 105993 Information 55 Processor 7 in group 0
This time stamp is one minute after the last disconnect but the other recent entries do not even get close to a disconnect.

Spooky ......
Paul

FullEventViewer now changed to "Show events from all times" ....... = nothing.

- - - Updated - - -

And now for something completely different .......
Orange are going to send a human to check the underground cables......
Wonder just how they will try that ........
Would not trust the first pair that arrived here to even find a telegraph pole but the second pair were much better.
Perhaps they just put meters of some sort at either end ..........
BUT ... (as always) the arriving end of the cables is unknown and probably kilometres away.
Oh what fun we are having ......... and about to have.
Paul

The Windows Event viewer, Custom view definition we used and the NirSoft FullEventLogView, Options, Advanced options filter definition we used both read the same event in the same internal logs.

Paul Black's suggested powershell command is reading a different internal log. It is not reporting the same events as the others.

You need to change Paul Black's command to
{Once again, substitute your own desired folder path in place of my D:\Desktop\Paul-InternetRecorder but keep things simple by using one without any spaces and without any special characters such as &}

Code:

PowerShell "Get-WinEvent -FilterHashtable @{LogName='Microsoft-Windows-UniversalTelemetryClient/Operational'; Id=55} -ErrorAction 'SilentlyContinue'  | Export-CSV -NoTypeInformation -Path D:\Desktop\Paul-InternetRecorder\PSEventsOutput.csv

Note that I also took the liberty of changing the output type to csv so it could be examined more readily [in Excel].

I'm sorry to say that, since the Event viewer & NirSoft results were empty, I expect these PS results to be empty as well.

Do you already have an ISO / InstallUSB for your current Version & a copy of your latest CU & .Net updates?
- If so then a Repair install procedure might fix your event logging problem.
- You would want to run the latest CU & .Net updates afterwards.
- Given your connectivity problem I don't suppose you would want to rely on doing any downloads so you will only want to try this if you have already got them.
By the way, your comments in your posts & your system spec in TenForums disagree about what Version you are currently on.


Denis

Pavl said:

Orange are going to send a human to check the underground cables...... Wonder just how they will try that ........

Paul,

I think you would accept that if you were to send an instantaneous high pressure pulse down a water pipe that had defects [such as leaks, dents, ...] in it, you would be able to monitor the various echo patterns that those defects caused in water pressure along the length of the pipe.
Well, electricity behaves in the same way; it echoes off any irregularity. We don't normally see it because it all happens so very quickly.
Telecoms engineers have used specialist monitors to diagnose telephone line defects this way for almost a hundred years.

All the best,
Denis