<< Click to Display Table of Contents >> Equate |
!Specifies the event type of an event log entry.
EventLogEntryTypeEnum EQUATE(LONG)
EventLogEntryType::Error EQUATE(1) !An error event. This indicates a significant problem the user should know about; usually a loss of functionality or data.
EventLogEntryType::Warning EQUATE(2) !A warning event. This indicates a problem that is not immediately significant, but that may signify conditions that could cause future problems.
EventLogEntryType::Information EQUATE(4) !An information event. This indicates a significant, successful operation.
EventLogEntryType::SuccessAudit EQUATE(8) !A success audit event. This indicates a security event that occurs when an audited access attempt is successful; for example, logging on successfully.
EventLogEntryType::FailureAudit EQUATE(16) !A failure audit event. This indicates a security event that occurs when an audited access attempt fails; for example, a failed attempt to open a file.
!Specifies how to handle entries in an event log that has reached its maximum file size.
OverflowActionEnum EQUATE(LONG)
OverflowAction::DoNotOverwrite EQUATE(-1) !Indicates that existing entries are retained when the event log is full and new entries are discarded.
OverflowAction::OverwriteAsNeeded EQUATE(0) !Indicates that each new entry overwrites the oldest entry when the event log is full.
OverflowAction::OverwriteOlder EQUATE(1) !Indicates that new events overwrite events older than specified by the MinimumRetentionDays property value when the event log is full. New events are discarded if the event log is full and there are no events older than specified by the MinimumRetentionDays property value.
RecordID LONG !- unique number
EntryType EventLogEntryTypeEnum
CategoryNumber SHORT
Source STRING(64)
Message STRING(32000)
Category STRING(64)
MachineName STRING(64)
InstanceId STRING(20) !- Int64
TimeGenerated STRING(32)
TimeWritten STRING(32)
UserName STRING(32)
END
NumberOfEntries LONG
logName STRING(256)
MachineName STRING(64)
Source STRING(64)
LogDisplayName STRING(64)
END