2.2.2 EventType
The EventType <7> is a 16-bit field that MUST be one of the following values.
Constant/value |
Description |
---|---|
EVENTLOG_SUCCESS 0x0000 |
An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, it can be appropriate to log an Information event. It is generally inappropriate for a desktop application to log each time it starts. This is the same meaning conveyed by EVENTLOG_INFORMATION_TYPE. |
EVENTLOG_ERROR_TYPE 0x0001 |
An event that indicates a problem such as loss of data or loss of functionality. For example, if a service fails to load during startup, an Error event is logged. |
EVENTLOG_WARNING_TYPE 0x0002 |
An event that is not necessarily significant but could indicate a possible future problem. For example, when disk space is low, a Warning event is logged. If an application can recover from an event without loss of functionality or data, it can generally classify the event as a Warning event. |
EVENTLOG_INFORMATION_TYPE 0x0004 |
An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, it can be appropriate to log an Information event. It is generally inappropriate for a desktop application to log each time it starts. This is the same meaning conveyed by EVENTLOG_SUCCESS. |
EVENTLOG_AUDIT_SUCCESS 0x0008 |
An event that records an audited security access attempt that is successful. For example, a user's successful attempt to log on to the system is logged as a Success Audit event. |
EVENTLOG_AUDIT_FAILURE 0x0010 |
An event that records an audited security access attempt that fails. For example, if a user tries to access a network drive and is denied access, the attempt is logged as a Failure Audit event. |