How does event viewer classify an event as a wanring, informational or error status

Hi all,

An interesting issue arose for me today. We have a particular event being logged as a wanring on one system while on all other systems the same event is being classified as information. As a result we recieve a message in our monitoring environment for this event on only the machine where the event is classified as a warning.

The event is exactly the same and the software version are all the same also. Only the error type is different. I was wondering if anyone knew or had any links to how this classification is decided on. I would have thought that this was written into the code of the program generating the event however this issue makes me think I am missing something.

Thanks in advance.
LVL 29
mass2612Asked:
Who is Participating?
 
DireOrbAntCommented:
The classification is sent to the event log from the program, windows doesn't decide it.
Well, not totally true, if the application ommits the type, it default to "Information". So I bet you are seing one with Information and another one with the proper type.
Is the eventID also the same in both?

What application is this? I bet it's a little "feature" in their code ;)
0
 
mass2612Author Commented:
That's what I was thinking. Thanks for clarifying. I'm going to re-install the software component on this particular box.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.