These events are primarily for end users, administrators, and support. The events that are found in the Administrative type logs indicate a problem and a well-defined solution that an administrator can act on. An example of an administrative event is an event that occurs when an application fails to connect to a printer.

Events in an analytic event log are published in high volume. They describe program operation and indicate problems that cannot be handled by user intervention.

Events in a debug type event log are used solely by developers to diagnose a problem for debugging.

Events in an operational type event log are used for analyzing and diagnosing a problem or occurrence. They can be used to trigger tools or tasks based on the problem or occurrence. An example of an operational event is an event that occurs when a printer is added or removed from a system.