The Application and Services Logs category was introduced after Windows Server 2008. This stores the events related to applications and their components. Most of the events listed under here are more suited for application developers for debugging and application-level troubleshooting.

This category has four log types:

• Admin: Events listed in this log are understandable by end users and IT professionals. This information can be used for basic application troubleshooting. Most of these log entries will include instructions or links to knowledge-based articles from the application vendor.
• Operational: Operational events include information about configuration changes or status changes in an application/service. These events are useful for application diagnosis and analyzing.
• Analytic: This log is by default hidden and disabled. This is usually enabled during the application or service diagnosis process as it generates a high volume of events.
• Debug: This is purely used for troubleshooting purposes, by application developers and vendors. Similar to the analytic log, it is by default hidden and disabled.