Wednesday, September 3, 2008

EventLog field types and descriptions

EventLog = string logname
RecordNumber = int position
TimeGenerated =  TimeStamp when the application sent the  event
TimeWritten = TimeStamp when the eventlog processed the event
EventID =  int Error number
EventType = int event type numerical ID{1 = Error event, 2 = Warning event,  4 = Information event} 
EventTypeName = string  event type
EventCategory = int  application/source defined field usually for event organization
EventCategoryName =string application/source defined field
SourceName = string name of application/source
Strings = string application/source field
ComputerName = string name of computer error is coming from
SID = string Security Identifier
Message = string application/source field  usually event description
Data = string application/source field usually Data relating to event

No comments: