On computers running Windows NT Workstation or Windows NT Server, MSMQ logs important information about its operation to Windows NT event logs. The event source for all events is always MSMQ. Most MSMQ events are written to the Application log, while security events are written to the Security log. There are three types of MSMQ application events:
Informational events are infrequent significant events that describe successful operations. Warning events are not necessarily significant, but indicate potential problems. Error events are generated for significant problems.
Note Some application events are not logged at each occurrence. For example, if an MSMQ routing server cannot establish a session with the target computer, an event is logged for the first failure, and another event is logged when the session is established.
There are two types of MSMQ security events:
Success Audit events are generated when selected objects are accessed successfully. Failure Audit events are generated when access to a selected object is denied.
For information on enabling MSMQ auditing, see "Auditing" in Chapter 5, "Securing Your MSMQ Enterprise".