If selected, change the retention method to Overwrite events as needed (oldest events first). Make sure Do not overwrite events (Clear logs manually) is cleared. In the Maximum log size field, specify the size you need.Navigate to Event Viewer tree → Windows Logs, right-click Security and select Properties. On a target server, navigate to Start → Windows Administrative Tools (Windows Server 2016 and higher) or Administrative Tools (Windows 2012) → Event Viewer.To configure the event log size and retention method However, if you have multiple target computers, consider configuring these settings via Group Policy as also described in this section Manually The procedure below provides a possible way to specify the event log settings manually. NOTE: To read about event log settings recommended by Microsoft, refer to this article.
Adjusting Event Log Size and Retention SettingsĬonsider that if the event log size is insufficient, overwrites may occur before data is written to the Long-Term Archive and the Audit Database, and some audit data may be lost.