An Event log consists of:
A Header
A description of the event that has occurred
Any other additional information.
On the Event Viewer each event is displayed separately. In a log each line shows information about a single event, including date, time, source, event type, category, event ID, user account, and computer name.
Careful monitoring of event logs located in the Event Viewer can help in predicting and identifying the sources of system problems. The Event-Log service starts at the boot up in case of Windows 2000 or Windows XP.
Three types of logs are recorded on the Event viewer: Application, System, and Security. Security logs can only be accessed by administrators.
Application log
The events that are logged by applications or programs are captured on the Application log. For example, a spreadsheet program might record a file error in the Application log. The type of event that should be logged is decided by the developer of the program.











