Event Consumers in Windows Event Log

Event consumers are entities that receive events from a computer. Windows Event Viewer (EventVwr.exe) is a event consumer that displays event information from a variety of specified event logs.

There are two types of Windows Event Log consumers:

  • Subscribers

    Applications that receive event notifications as they are received by Windows Event Log. For more information, see Subscribing to Events.

  • Event log readers

    Applications that query logged events. For more information, see Querying for Events.

An event query is used for creating subscriptions or for reading events from the event log. The XPath-based query language provides control over which events are delivered to the subscribers and log readers. For more information, see Event Selection.

For events that are fired into a specific channel, Windows Event Log performs the following operations:

  • Writes the event into an associated event log.

  • Deliever the event to each interested event subscriber based on a subscription query.

    • Deliever a copy of the event to push subscribers.
    • Deliever a notification to pull subscribers.

For more information about push and pull subscriptions, see Subscribing to Events.

See Also

Subscribing to Events

Event Selection

Querying for Events

Send comments about this topic to Microsoft

Build date: 5/7/2009