Solved

is and where is log archived?

Posted on 2011-02-17
4
290 Views
Last Modified: 2012-05-11
is there a setting where we can check if the logs (from event viewer) is being archived periodically (monthly etc) and if so , where is it saved?

thanks
0
Comment
Question by:anushahanna
  • 2
  • 2
4 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 34919237
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34919406
thanks - in
C:\Windows\System32\winevt\Logs
I see only one Security.evtx and it has 24k records for the last 2 hours. but i do not see any other archived security files in that folder.

this seems to be the current and latest one.

where would the older security logs be? where is the setting to see if this is being overwritten or not.

0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
ID: 34920655
They get overwritten. You can stop the overwritting I believe check in the link that I posted. If they fill you can see issues
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34935880
thanks dariusg
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now