Sources

HKLM\SYSTEM\CurrentControlSet\Services\EventLog\<Log-name>

Data type Range Default value
REG_MULTI_SZ Names of programs There is no default value for this entry.

Description

Specifies the applications, services, or groups of applications that write events to this log. Each program listed in the value of Sources is represented by a subkey in the LogName subkey.