Multiple entries for same event id errros

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

when we have an event id error of 539 or 681 there will be at least 3 entries with the same time in the security log. this makes the logs incredibly large. is there any way to have the log have only one entry for each different incident? thanks
 
That seems to be the nature of the beast and I know of know way to change it. I
believe the operating system will purposely retry failed logons a number of times
which is one reason not to set account lockout threshold too low. Ten should be an
absolute minimum. --- Steve


railroader said:
when we have an event id error of 539 or 681 there will be at least 3 entries with
the same time in the security log. this makes the logs incredibly large. is there any
way to have the log have only one entry for each different incident? thanks
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top