HKLM\SYSTEM\CurrentControlSet\Services\
The Eventlog subkey stores configuration data used by Event Viewer to manage the event logs.
The Eventlog subkey contains the standard entries that appear in all Services subkeys. In addition, the Eventlog subkey contains subkeys representing each of its logs. In this file, these log-specific subkeys are represented by the generic subkey, <Log-name>.
Windows 2000 creates subkeys for the three standard logs that appear in Event Viewer -- Application, Security, and System -- and Windows services, such as DNS, create subkeys for their own logs. Programmers can create additional log-specific subkeys for custom logs that they create.
Related Entries