Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Grow time storage log event security

Posted on 2010-09-10
10
Medium Priority
?
251 Views
Last Modified: 2013-11-05
Dear,

I made GPO for all my desktop and servers, hold log security event for 40 days, I change maximum log size for 499968 KB but I seen that my server doesn't hold more that two  days .

How solve this problem ?

Bruno Steven
0
Comment
Question by:aspenbr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
10 Comments
 
LVL 13

Expert Comment

by:George Sas
ID: 33649976
Are you sure the gpo is applied to your servers ?
Are you talking about server as a member server or Domain Controllers ?
Try to run a "gpresult /r" and see if your GPO is applied to the server with the problem.
0
 
LVL 1

Author Comment

by:aspenbr
ID: 33650048
The GPO was applied , no problems . The server are member server and domain Controllers
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33650108
So you have same problem on both member servers and DC's ?
How long ago did you applied the GPO ? Did you rebooted any of the servers after applying the GPO ?
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 13

Expert Comment

by:George Sas
ID: 33650200
What OS are you running on your DC's ?
0
 
LVL 1

Author Comment

by:aspenbr
ID: 33650515
OS is Windows 2003 r2 Standard . I don't have problem with GPO application only policy . I need increase volume for storage event of security log , the limit isn't enough for hold log for 40 day .  
0
 
LVL 13

Accepted Solution

by:
George Sas earned 1000 total points
ID: 33650936
0
 
LVL 1

Author Comment

by:aspenbr
ID: 33667369
Thank GeoSs , but this template work only CrashOnAuditFail enable, isn't my case. I change storage limit for 1 GB . The model is nice, but model (adm) doesn't work when storage limit was reached. Do have you know change the MODEL for this ?


0
 
LVL 1

Author Comment

by:aspenbr
ID: 33667505
I have idea, on linux the is tool logrotate that break log for syslog storage log on new file. Do you know some tool work like logrotate on Windows system  ?
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33669982
aspenbr: you are totally wrong here !

You can use the :
"Backup Log Automatically when full" option in the GPO.
This will save old event logs automatically and start a new one.
Have you even tried ??

This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the “Retain old events” policy setting is enabled.

If you enable this policy setting and the “Retain old events” policy setting is enabled, the Event Log file is automatically closed and renamed when it is full. A new file is then started.

If you disable this policy setting and the “Retain old events” policy setting is enabled, then new events are discarded and the old events are retained.

When this policy setting is not configured and the “Retain old events” policy setting is enabled, new events are discarded and the old events are retained.
0
 
LVL 1

Author Comment

by:aspenbr
ID: 33719112
Sorry , I am wrong , the GPO work fine , all logs more big that 400 MB create a new file for storage security event.

Thank very much .
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question