3.1.7 Server Configurations for Localizable Event Descriptions

The server MAY store various localizable description strings in resource binary files formatted according to the Microsoft Portable Executable and Common Object File Format Specification, as described in [PE-COFF]. These resource files MAY be specified per event log or per event source. When the resource files are created for event logs the server MUST add paths to their locations into the registry using the Windows Remote Registry Protocol, as specified in [MS-RRP], as registry values under each log's registry location described in 3.1.1.2. When the resource files are created for event sources, the server MUST add paths to their locations into the registry using the Windows Remote Registry Protocol, as specified in [MS-RRP], as registry values under each source's registry location described in section 3.1.1.3.

If the log contains a localizable display name, the server MUST specify it via "DisplayNameFile" and "DisplayNameID" registry values under the log registry key described in section 3.1.1.2.

"DisplayNameFile" data MAY contain environment variables enclosed by percent (%).

If the event source contains parameter strings, the server MUST specify a "ParameterMessageFile" registry value under the source registry key that is specified in section 3.1.1.3.

The server MAY specify a Category Message File for an event source—a binary resource file defining description strings for event categories, where the resource ID corresponds to the category number. Thus, string 2 is the category string for all EventIDs for this source of category 2.

If the event source contains localizable event description strings, the server MUST specify an "EventMessageFile" registry value under the source registry key described in 3.1.1.3. The server MAY specify a "PrimaryModule" REG_EXPAND_SZ registry value under the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\<LogName> registry key as described in 3.1.1.2 in case the client cannot find the description string.