Windows Event Log Category

NTDEV
1

Hi,

I am trying to log some events to the system event log from a driver and
want to have the category displayed properly in the event viewer. The MC
file I have is like this:

MessageId=1

SymbolicName=WDM_Category

Language=English

WDM

.

But instead of “WDM”, the “Device” is displayed under the category in the
event viewer. I guess the MessageId 1 is used by OS, so I changed the
MessageId to another number, like 48 in mc file and this time I had the
“(48)” displayed. Is there any way to have “WDM” showed up for category?

Thanks.

Qingbo Li

2

Did you add the appropriate registry settings so that the event viewer
can load your driver and load the MC resource from the binary?

For instance, look at %windir%\inf\msmouse.inf

[mouclass_EventLog_AddReg]
HKR,EventMessageFile,0x00020000,“%%SystemRoot%%\System32\IoLogMsg.dll;%
%SystemRoot%%\System32\drivers\mouclass.sys”
HKR,TypesSupported,0x00010001,7

Which what you typically add to wire in the binary.

D

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Qingbo Li
Sent: Wednesday, September 29, 2004 7:41 AM
To: Windows System Software Devs Interest List
Subject: [ntdev] Windows Event Log Category

Hi,

I am trying to log some events to the system event log from a driver and
want to have the category displayed properly in the event viewer. The MC
file I have is like this:

MessageId=1

SymbolicName=WDM_Category

Language=English

WDM

.

But instead of “WDM”, the “Device” is displayed under the category in
the
event viewer. I guess the MessageId 1 is used by OS, so I changed the
MessageId to another number, like 48 in mc file and this time I had the
“(48)” displayed. Is there any way to have “WDM” showed up for category?

Thanks.

Qingbo Li

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com