Guest cashdeskmac Posted September 19, 2007 Posted September 19, 2007 Hi, is there a way to tell Eventvwr how long it should hold on to records? I wanted to look back over a year but it only goes back a few months. I know I can't do anything about it now but for future reference I would like eventvwr to hold information for at least 2 years before letting it go. Is it set by date, number of records or total size of data, and is there any way to configure it? Any help would be much appreciated.
Guest John John Posted September 19, 2007 Posted September 19, 2007 Re: Set the date range in Eventvwr http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch06n.mspx Allow the log to overwrite if necessary, if you allow the log to grow to maximum size and if it is not set to overwrite you may not be able to log on to the computer. If you want to keep logs for that long you should just periodiacally save it and then clear it, see the memory implication in the above article. John cashdeskmac wrote: > Hi, > > is there a way to tell Eventvwr how long it should hold on to records? > > I wanted to look back over a year but it only goes back a few months. I > know I can't do anything about it now but for future reference I would like > eventvwr to hold information for at least 2 years before letting it go. > > Is it set by date, number of records or total size of data, and is there any > way to configure it? > > Any help would be much appreciated.
Guest cashdeskmac Posted September 19, 2007 Posted September 19, 2007 Re: Set the date range in Eventvwr Many thanks, John John, that was most useful. "John John" wrote: > http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch06n.mspx > > Allow the log to overwrite if necessary, if you allow the log to grow to > maximum size and if it is not set to overwrite you may not be able to > log on to the computer. If you want to keep logs for that long you > should just periodiacally save it and then clear it, see the memory > implication in the above article. > > John > > cashdeskmac wrote: > > > Hi, > > > > is there a way to tell Eventvwr how long it should hold on to records? > > > > I wanted to look back over a year but it only goes back a few months. I > > know I can't do anything about it now but for future reference I would like > > eventvwr to hold information for at least 2 years before letting it go. > > > > Is it set by date, number of records or total size of data, and is there any > > way to configure it? > > > > Any help would be much appreciated. >
Recommended Posts