EventType Complex Type

Defines the root node of the Event schema.

<xs:complexType name="EventType">
    <xs:sequence>
        <xs:element name="System"
            type="SystemPropertiesType"
         />
        <xs:choice>
            <xs:element name="EventData"
                type="EventDataType"
                minOccurs="0"
             />
            <xs:element name="UserData"
                type="UserDataType"
                minOccurs="0"
             />
            <xs:element name="DebugData"
                type="DebugDataType"
                minOccurs="0"
             />
            <xs:element name="BinaryEventData"
                type="hexBinary"
                minOccurs="0"
             />
            <xs:element name="ProcessingErrorData"
                type="ProcessingErrorDataType"
                minOccurs="0"
             />
        </xs:choice>
        <xs:element name="RenderingInfo"
            type="RenderingInfoType"
            minOccurs="0"
         />
        <xs:any
            minOccurs="0"
            maxOccurs="unbounded"
            processContents="lax"
            namespace="##other"
         />
    </xs:sequence>
    <xs:anyAttribute
        processContents="lax"
        namespace="##other"
     />
</xs:complexType>

Child elements

ElementTypeDescription
BinaryEventData hexBinary

Contains the event data as a binary blob. The event data is rendered as a binary blob if the rendering function cannot find the metadata used to decode the event.

DebugData DebugDataType

Contains the data that can be logged for Windows software trace preprocessor (WPP) events.

EventData EventDataType

Contains the event data. The order of the data items in the template determines the layout of the event data.

ProcessingErrorData ProcessingErrorDataType

Contains details of the error that occurred while trying to render the event. This can occur if the event data does not match the event data definition in the manifest. The event data is included as a binary blob.

RenderingInfo RenderingInfoType

Contains the rendered message strings for the event (includes the event's message string and the message strings for any of the event's properties such as level, task, and opcode). Only events that have been collected using the Windows Event Collector service will contain this section.

System SystemPropertiesType

Contains information that identifies the provider and how it was enabled, the event, the channel to which the event was written, and system information such as the process and thread IDs.

UserData UserDataType

Contains the event data. The user data section of the template determines the layout of the event data.

Remarks

Typically, this section will contain with the EventData or UserData section. The EventData section is used if the template does not contain a UserData section.

Requirements

Minimum supported client

Windows Vista [desktop apps only]

Minimum supported server

Windows Server 2008 [desktop apps only]

 

 

Show: