1.1 Glossary
The following terms are defined in [MS-GLOS]:
endpoint
fully qualified domain name (FQDN) (1)
globally unique identifier (GUID)
Interface Definition Language (IDL)
localizable
named pipe
Network Data Representation (NDR)
opnum
registry
remote procedure call (RPC)
RPC protocol sequence
Unicode
Universal Naming Convention (UNC)
universally unique identifier (UUID)
well-known endpoint
The following terms are specific to this document:
backup event log: An event log that is read-only, and cannot be added to. Backup event logs are typically used for archival purposes or for copying to another computer for use by support personnel.
category message file: A binary resource file defining category strings for event categories.
category string: A localizable human-readable string corresponding to the event category of a record.
event: A discrete piece of historical information that may be of interest to administrators of a computer system. An example of an event would be a particular user logging on to the computer.
event category: An application-specific value used for grouping events. For example, an application might use one category for all events that occur during startup, and use another category for events that occur during shutdown. Other applications might use categories to identify the part of the application that raised the event.
event description string: A localizable human-readable string corresponding to the record.
event log: A collection of records, each of which corresponds to an event.
event message file: A binary resource file defining unexpanded description strings for an event source.
event source: An application or component that writes to an event log.
EventID: An integer indicating the type of event. For example, a user logging on to the computer could be one type of event while a user logging off would be another type; and these events could be indicated by using distinct EventIDs.
live event log: An event log that can be read or added to.
parameter message file: A binary resource file that defines parameter strings for an event source.
parameter string: A localizable human-readable string inserted into an event description string using the string rendering algorithm defined in section 3.2.4.1.5.2.
record: An event that is currently represented in an event log.
record ID: An unsigned int64 numeric value. The record ID is the identifier of the event logrecords in the event log file.
registry key or registry subkey: A node in the logical tree of the Windows registry data store. For more information, see [MSWINREG]. The term subkey specifies that a key has a parent in the logical tree; for example, "A is a subkey of B".
synchronization object: A data structure that is used to synchronize client requests to prevent data corruption from the execution of multiple threads. In Windows-based servers, the CRITICAL_SECTION object (as specified in [MSDN-CSO]) is used as the synchronization object.
unexpanded description string: A localizable string containing replaceable insertion patterns that are expanded by using a string-rendering algorithm, defined in section 3.2.4.1.5, to produce an event description string.
MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as specified in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or SHOULD NOT.
