Security Event Log Size

[nbowles]

I am trying to change the size of my security event log but it keeps getting switched back to the default of 16384KB. I manually clear the log every day with a script, thanks tek-tips for the script, but I am missing entries because there is so much activity in the log.

I think I could set the script up to run more than once a day, but would really prefer to have the size of the log be larger.

Thanks for the help.

 

[itsp1965]

Well to what size are u trying to change the log to? I have mine set to 528000 KB and have it set to overwrite events > 60 days

 

[58sniper]

Is there a GPO that's changing it? That is an option in GPOs.

16MB is pretty darn small.

Pat Richard
Microsoft Exchange MVP
Contributing author The Complete Reference: Microsoft Exchange Server 2007

 

[nbowles]

No, all of the GPOs have the event log stuff undefined. I have tried to change the GPO to enable maximum security event log size but it still reverts back to 16384KB. I'm looking to set it up to about 100MB.

 

[58sniper]

Combined limit is about 200MB for the three logs.

If it's reverting back, I still think there is a GPO somewhere setting it.

Pat Richard
Microsoft Exchange MVP
Contributing author The Complete Reference: Microsoft Exchange Server 2007

 

[nbowles]

58sniper,

Thank you for the insight. I found the GPO that was giving me grief. Once corrected the log file size works great.

Thanks for all of the help.