Event Schema

The Event schema defines the following elements and types that identify the elements and attributes of a logged event:

• EventSchema Elements
• EventSchema Simple Types
• EventSchema Complex Types

The elements section contains the names of the elements that you would find in a logged events; however, to get the details for each element, see the complex type that contains the element.

The Windows SDK includes the schema in the \Include\Event.xsd file.

You can use this schema to identify the elements and attributes when calling the EvtRender function to render specific sections or properties of the event. For an example that shows how to use this schema when rendering events, see Rendering Events.

In addition to the Event schema, Windows Event Log also defines the following schemas:

• EventManifest Schema—defines the elements and types used to write an instrumentation manifest.
• Query Schema—defines the elements and types used to write a query to retrieve events from one or more channels.