EventType Complex Type

Defines the root node of the Event schema.

<xs:complexType name="EventType">
    <xs:sequence>
        <xs:element name="System"
            type="SystemPropertiesType"
         />
        <xs:choice>
            <xs:element name="EventData"
                type="EventDataType"
                minOccurs="0"
             />
            <xs:element name="UserData"
                type="UserDataType"
                minOccurs="0"
             />
            <xs:element name="DebugData"
                type="DebugDataType"
                minOccurs="0"
             />
            <xs:element name="BinaryEventData"
                type="hexBinary"
                minOccurs="0"
             />
            <xs:element name="ProcessingErrorData"
                type="ProcessingErrorDataType"
                minOccurs="0"
             />
        </xs:choice>
        <xs:element name="RenderingInfo"
            type="RenderingInfoType"
            minOccurs="0"
         />
        <xs:any
            minOccurs="0"
            maxOccurs="unbounded"
            processContents="lax"
            namespace="##other"
         />
    </xs:sequence>
    <xs:anyAttribute
        processContents="lax"
        namespace="##other"
     />
</xs:complexType>

Child elements

Element	Type	Description
BinaryEventData	hexBinary	Contains the event data as a binary blob. The event data is rendered as a binary blob if the rendering function cannot find the metadata used to decode the event.
DebugData	DebugDataType	Contains the data that can be logged for Windows software trace preprocessor (WPP) events.
EventData	EventDataType	Contains the event data. The order of the data items in the template determines the layout of the event data.
ProcessingErrorData	ProcessingErrorDataType	Contains details of the error that occurred while trying to render the event. This can occur if the event data does not match the event data definition in the manifest. The event data is included as a binary blob.
RenderingInfo	RenderingInfoType	Contains the rendered message strings for the event (includes the event's message string and the message strings for any of the event's properties such as level, task, and opcode). Only events that have been collected using the Windows Event Collector service will contain this section.
System	SystemPropertiesType	Contains information that identifies the provider and how it was enabled, the event, the channel to which the event was written, and system information such as the process and thread IDs.
UserData	UserDataType	Contains the event data. The user data section of the template determines the layout of the event data.

Remarks

Typically, this section will contain with the EventData or UserData section. The EventData section is used if the template does not contain a UserData section.

Requirements

Requirement	Value
Minimum supported client	Windows Vista [desktop apps only]
Minimum supported server	Windows Server 2008 [desktop apps only]