Retrieving Event Data
To consume event specific data, the consumer must know the format of the event data. This is not an issue if you are consuming events from your own provider because you know the format of the data. However, to consume an event from any provider, the provider must publish the layout of the event data. For an overview of how event metadata operates as well as how to publish your event metadata so others can use it, see Event Metadata Overview.
To consume events on Windows Vista that were published using a manifest, MOF, or TMF files, as well as TraceLogging events, see Retrieving Event Data Using TDH.
To consume events prior to Windows Vista that were published using MOF, see Retrieving Event Data Using MOF.