Viewing Correlated Events

Correlated events are all of the events with the same correlation ID (which can be seen in the Correlation ID event attribute). And all of the events with the same correlation ID are part of the same transaction.

1. In the Event Viewer, select the event whose correlated events you would like to view.
2. Click either the links button in the event list toolbar, or the Links button in the Event Links column for the selected event.
3. Select Show Correlated Events from the drop-down menu. (If the drop-down menu does not contain a Show Correlated Events selection, the selected event does not have a correlation ID, i.e., it is not part of a transaction.)

   A new event list is displayed that contains the events that are correlated to the event that was selected. For example:

   

   Note that some correlated event lists may only contain the event that you selected in the original event list, which means that there are no other events with the same correlation ID.

   A bread-crumb trail is also created above the toolbar that allows you to easily return to the original event list:

   

   You can treat a list of correlated events just like any other event list. That is, you can filter and sort the correlated events, save the event list if desired, or click individual events in the list to display the attributes for that event in the Event Attributes section. You can also link to additional event lists using the Link tool (for information, see Viewing an Additional Event List Using Event Links).