Event logs deleting themselves

[xtechx]

I have notice in my WIndows 2003 that my events logs have been deleting themselves. I am not sure if someone is intentionally deleting them or it is an operating system problem. Can someone assist would could be the problem and know of any free tool to monitor event logs or retrieve delete files that were deleted.

 

[itsp1965]

If you enable auditing of object access, you should be able get an idea as to who deleted the event logs.

 

[Cstorms]

Have you checked the properties of these logs, could the settings have been modified for maybe a smaller max log size? Could they be overwriting themselves?

Cory