Services\EventLog

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

HKLM\SYSTEM\CurrentControlSet\Services

Description

The EventLog subkey stores configuration data that Event Viewer uses to manage the event logs.

This subkey contains the standard entries that appear in all Services subkeys. It also contains subkeys, called Log-name, representing each of the logs.

Windows Server 2003 creates subkeys for the three standard logs that appear in Event Viewer: Application, Security, and System. Windows services, such as the Domain Name System (DNS), also create subkeys for their own logs. Programmers can create additional log-specific subkeys for custom logs that they create.