How does event viewer classify an event as a wanring, informational or error status
Posted on 2006-07-18
An interesting issue arose for me today. We have a particular event being logged as a wanring on one system while on all other systems the same event is being classified as information. As a result we recieve a message in our monitoring environment for this event on only the machine where the event is classified as a warning.
The event is exactly the same and the software version are all the same also. Only the error type is different. I was wondering if anyone knew or had any links to how this classification is decided on. I would have thought that this was written into the code of the program generating the event however this issue makes me think I am missing something.
Thanks in advance.