PrimaryModule

HKLM\SYSTEM\CurrentControlSet\Services\EventLog\<Log-name>

Data type Range Default value
REG_SZ Subkey name There is no default value for this entry.

Description

Identifies the subkey in Services\Eventlog\<Log-name> that contains default values for the entries in the Services\Eventlog\<Log-name>\<Source-name> subkey.

These default values are used to display events in Event Viewer when the source program has not specified values in a <Source-name> subkey, or when files specified as the value of an entry cannot be opened or do not have the required data.

For example, in the Services\Eventlog\Security subkey, the default value of PrimaryModule is Security. This value indicates that the Services\Eventlog\Security\Security subkey contains default values for entries that appear in the Services\Eventlog\Security\<SourceName> subkey. These values are used to display events in the security log when the source program does not specify valid values for the entries.