EventType Complex Type

Defines the root node of the Event schema.

<xs:complexType name="EventType">
    <xs:sequence>
        <xs:element name="System"
            type="SystemPropertiesType"
         />
        <xs:choice>
            <xs:element name="EventData"
                type="EventDataType"
                minOccurs="0"
             />
            <xs:element name="UserData"
                type="UserDataType"
                minOccurs="0"
             />
            <xs:element name="DebugData"
                type="DebugDataType"
                minOccurs="0"
             />
            <xs:element name="BinaryEventData"
                type="hexBinary"
                minOccurs="0"
             />
            <xs:element name="ProcessingErrorData"
                type="ProcessingErrorDataType"
                minOccurs="0"
             />
        </xs:choice>
        <xs:element name="RenderingInfo"
            type="RenderingInfoType"
            minOccurs="0"
         />
        <xs:any
            minOccurs="0"
            maxOccurs="unbounded"
            processContents="lax"
            namespace="##other"
         />
    </xs:sequence>
    <xs:anyAttribute
        processContents="lax"
        namespace="##other"
     />
</xs:complexType>

Child elements

Element Type Description
BinaryEventData hexBinary Contains the event data as a binary blob. The event data is rendered as a binary blob if the rendering function cannot find the metadata used to decode the event.
DebugData DebugDataType Contains the data that can be logged for Windows software trace preprocessor (WPP) events.
EventData EventDataType Contains the event data. The order of the data items in the template determines the layout of the event data.
ProcessingErrorData ProcessingErrorDataType Contains details of the error that occurred while trying to render the event. This can occur if the event data does not match the event data definition in the manifest. The event data is included as a binary blob.
RenderingInfo RenderingInfoType Contains the rendered message strings for the event (includes the event's message string and the message strings for any of the event's properties such as level, task, and opcode). Only events that have been collected using the Windows Event Collector service will contain this section.
System SystemPropertiesType Contains information that identifies the provider and how it was enabled, the event, the channel to which the event was written, and system information such as the process and thread IDs.
UserData UserDataType Contains the event data. The user data section of the template determines the layout of the event data.

Remarks

Typically, this section will contain with the EventData or UserData section. The EventData section is used if the template does not contain a UserData section.

Requirements

Minimum supported client
Windows Vista [desktop apps only]
Minimum supported server
Windows Server 2008 [desktop apps only]