Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How do I view older Windows Security Logs? Seems like the logs only show from 1/11/15, but I need to view logs before that date.

Posted on 2015-01-12
6
116 Views
Last Modified: 2015-01-20
How do I view older Windows Security Logs? Seems like the logs only show from 1/11/15, but I need to view logs before that date.
0
Comment
Question by:joukiejouk
6 Comments
 
LVL 14

Accepted Solution

by:
dmwynne earned 300 total points
ID: 40545216
The logs may be set to be overwritten.

Open Event Viewer, go to one of the logs (application, security, system etc), right click, properties, what is the max log size and is it set to overwrite?
0
 

Author Comment

by:joukiejouk
ID: 40545234
Max size is 20 MB. It was set to overwrite. How can I restore any log prior to that date?
0
 
LVL 14

Expert Comment

by:dmwynne
ID: 40545314
You need to restore a backup otherwise I think you are out of luck.
0
Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

 

Author Comment

by:joukiejouk
ID: 40545681
Thanks. I am trying to collect the log from a remote system to forward to my security team. What is the best approach to do this? Currently I am using event viewer MMC and connecting to the remote computer, and doing a saved log file as, but it is hosing my computer.
0
 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 200 total points
ID: 40545700
You can copy the security logfile from C:\Windows\System32\winevt\Logs, the name is security.evtx.
0
 
LVL 3

Expert Comment

by:Bahloul
ID: 40545998
Hi,

 the default log size is 20 MB when the file getting full it removes from the old log so you must increase the log file size to gain more history but this wont fix your issue you may see the below log for log size recommendation :-

http://support.microsoft.com/kb/957662

Bahloul.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SBS 2011 Backup Drive 8 74
Does Robocopy do a Delta copy of a file (Remote copy) ? 2 39
Disk Cleanup and Temporary Files 15 56
win10 should i turn hibernation on? 5 31
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question