System log
The Windows system component event logs are captured on the System Log. For example, a device driver failure during startup is recorded in the System log. The type of system events that should be logged are predetermined by Windows.
Security log
The Security log captures security events such as valid and invalid logon attempts as well as events related to resource use such as deleting, creating or opening of files. Most Security log entries consist of the header and a description and the administrator determines as what events should be recorded in the Security log.
On an Event log the description is the most useful piece of information. It indicates the significance of the event. The event description depends on the event type.











