Event Log

I am on NT4.0

Does anybody know how the EventCategory (it's a WORD)is mapped to string in the in NT EventViewer?
 The documentation says that: Specifies a subcategory for this event. This subcategory is source specific.
  Wherefrom can I get this category mapping info?

arvind_csAsked:
Who is Participating?
 
xLsConnect With a Mentor Commented:
Values are 32 bit values layed out as follows:
3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1
1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
+---+-+-+-----------------------+-------------------------------+
|Sev|C|R|     Facility          |               Code            |
+---+-+-+-----------------------+-------------------------------+

where

      Sev - is the severity code

          00 - Success
          01 - Informational
         10 - Warning
         11 - Error

      C - is the Customer code flag

      R - is a reserved bit

      Facility - is the facility code

      Code - is the facility's status code


e.g:

#define STATUS_SEVERITY_WARNING          0x2
#define STATUS_SEVERITY_SUCCESS          0x0
#define STATUS_SEVERITY_INFORMATIONAL    0x1
#define STATUS_SEVERITY_ERROR            0x3


If you need more info, add comment and i'll send you more defined code.

cheers

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.