is and where is log archived?

is there a setting where we can check if the logs (from event viewer) is being archived periodically (monthly etc) and if so , where is it saved?

thanks
LVL 6
anushahannaAsked:
Who is Participating?
 
Darius GhassemConnect With a Mentor Commented:
0
 
anushahannaAuthor Commented:
thanks - in
C:\Windows\System32\winevt\Logs
I see only one Security.evtx and it has 24k records for the last 2 hours. but i do not see any other archived security files in that folder.

this seems to be the current and latest one.

where would the older security logs be? where is the setting to see if this is being overwritten or not.

0
 
Darius GhassemConnect With a Mentor Commented:
They get overwritten. You can stop the overwritting I believe check in the link that I posted. If they fill you can see issues
0
 
anushahannaAuthor Commented:
thanks dariusg
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.