The following terms are defined in [MS-GLOS]:
globally unique identifier (GUID)
Interface Definition Language (IDL)
remote procedure call (RPC)
RPC protocol sequence
universally unique identifier (UUID)
The following terms are specific to this document:
backup event log: An event log that cannot be written to, only read from. Backup event logs are typically used for archival purposes, or for copying to another computer for use by support personnel.
channel: A destination of event writes and a source for event reads. The physical backing store is a live event log.
cursor: The current position within a result set.
event: A discrete piece of historical information that may be of interest to administrators of a computer system. An example of an event would be a particular user logging on to the computer.
event descriptor: A structure indicating the kind of event. For example, a user logging on to the computer could be one kind of event, while a user logging off would be another, and these events could be indicated by using distinct event descriptors.
event log: A collection of records, each of which corresponds to an event.
event metadata: The metadata of an event provider including the event definition, events, channels the provider generates the events into, the unique identifier of the provider, and the localized string tables for this provider.
live event log: An event log that can be written to and read from.
publisher: An application or component that writes to one or more event logs.
publisher metadata: The metadata of an event that includes the predefined property values of one event and the event user-defined data definition.
query: A context-dependent term commonly overloaded with three meanings, defined as follows:
The act of requesting records from a set of records.
The request itself.
The particular string defining the criteria for which records are to be returned. This string can either be an XPath, as specified in [XPATH], (for more information, see section 2.2.15) or a structured XML query, as specified in [XML10], (for more information, see section 2.2.16).
record: The physical data structure that contains an event that is currently in an event log.
result set: Records selected by a query.
structured XML query: An XML document that specifies a query that may contain multiple subqueries. For more information, see section 2.2.16.
subquery: A component of a structured XML query. For more information, see section 2.2.16.
subscription filter: An XPath query expression used in a subscription to filter out events that do not meet certain criteria from the client.
MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as described in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or SHOULD NOT.