Conventional Driver Event Logging

The original Windows NT architecture includes a mechanism that allows software components to keep a record of noteworthy events. This event-logging capability can help monitor the behavior of software that is under development or in production.

How Event Logging Works

The developers of Windows NT had several goals for the event-logging architecture. The first was to provide subsystems with the unified framework for recording information. This framework includes a simple yet flexible standard for the binary format of event-logging entries.

Another goal was to give system administrators an easy and consistent way to view these messages. As part of this goal, viewer utilities must be able to display event messages ...

Get Windows® 2000 Device Driver Book: A Guide for Programmers, Second Edition, The now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.