Windows EventInformation
Windows Event ID 1104 – Microsoft-Windows-Eventlog: Event Log Service Shutdown
Event ID 1104 indicates the Windows Event Log service is shutting down, typically during system shutdown, restart, or service maintenance operations.