• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 213
  • Last Modified:

How does event viewer classify an event as a wanring, informational or error status

Hi all,

An interesting issue arose for me today. We have a particular event being logged as a wanring on one system while on all other systems the same event is being classified as information. As a result we recieve a message in our monitoring environment for this event on only the machine where the event is classified as a warning.

The event is exactly the same and the software version are all the same also. Only the error type is different. I was wondering if anyone knew or had any links to how this classification is decided on. I would have thought that this was written into the code of the program generating the event however this issue makes me think I am missing something.

Thanks in advance.
0
mass2612
Asked:
mass2612
1 Solution
 
DireOrbAntCommented:
The classification is sent to the event log from the program, windows doesn't decide it.
Well, not totally true, if the application ommits the type, it default to "Information". So I bet you are seing one with Information and another one with the proper type.
Is the eventID also the same in both?

What application is this? I bet it's a little "feature" in their code ;)
0
 
mass2612Author Commented:
That's what I was thinking. Thanks for clarifying. I'm going to re-install the software component on this particular box.
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now