Set the date range in Eventvwr

[Guest]

Hi,

is there a way to tell Eventvwr how long it should hold on to records?

I wanted to look back over a year but it only goes back a few months. I
know I can't do anything about it now but for future reference I would like
eventvwr to hold information for at least 2 years before letting it go.

Is it set by date, number of records or total size of data, and is there any
way to configure it?

Any help would be much appreciated.

 

[John John]

http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch06n.mspx

Allow the log to overwrite if necessary, if you allow the log to grow to
maximum size and if it is not set to overwrite you may not be able to
log on to the computer. If you want to keep logs for that long you
should just periodiacally save it and then clear it, see the memory
implication in the above article.

John

 

[Guest]

Many thanks, John John, that was most useful.

http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch06n.mspx

Allow the log to overwrite if necessary, if you allow the log to grow to
maximum size and if it is not set to overwrite you may not be able to
log on to the computer. If you want to keep logs for that long you
should just periodiacally save it and then clear it, see the memory
implication in the above article.

John