2.2.2 EventType

The EventType <7> is a 16-bit field that MUST be one of the following values.

Constant/value

Description

EVENTLOG_SUCCESS

0x0000

An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, it can be appropriate to log an Information event. It is generally inappropriate for a desktop application to log each time it starts. This is the same meaning conveyed by EVENTLOG_INFORMATION_TYPE.

EVENTLOG_ERROR_TYPE

0x0001

An event that indicates a problem such as loss of data or loss of functionality. For example, if a service fails to load during startup, an Error event is logged.

EVENTLOG_WARNING_TYPE

0x0002

An event that is not necessarily significant but could indicate a possible future problem. For example, when disk space is low, a Warning event is logged. If an application can recover from an event without loss of functionality or data, it can generally classify the event as a Warning event.

EVENTLOG_INFORMATION_TYPE

0x0004

An event that describes the successful operation of an application, driver, or service. For example, when a network driver loads successfully, it can be appropriate to log an Information event. It is generally inappropriate for a desktop application to log each time it starts. This is the same meaning conveyed by EVENTLOG_SUCCESS.

EVENTLOG_AUDIT_SUCCESS

0x0008

An event that records an audited security access attempt that is successful. For example, a user's successful attempt to log on to the system is logged as a Success Audit event.

EVENTLOG_AUDIT_FAILURE

0x0010

An event that records an audited security access attempt that fails. For example, if a user tries to access a network drive and is denied access, the attempt is logged as a Failure Audit event.