I just have a question. Are Windows 2008 R2 Event Logs memory-mapped? I know in Windows 2003, they are, and I sometimes had headaches regarding setting maximum log sizes (over default).
It was my understanding that 2008 would remove the memory-mapping dependency for event logs. Especially since they now have a recommended maximum log size of 4 GB.
The following article hints that 2008 does not use memory mapped files, but maybe I'm misinterpreting it. http://technet.microsoft.com/en-us/library/cc722385(WS.10).aspx