How do I view older Windows Security Logs? Seems like the logs only show from 1/11/15, but I need to view logs before that date.

How do I view older Windows Security Logs? Seems like the logs only show from 1/11/15, but I need to view logs before that date.
joukiejoukAsked:
Who is Participating?
 
dmwynneConnect With a Mentor Commented:
The logs may be set to be overwritten.

Open Event Viewer, go to one of the logs (application, security, system etc), right click, properties, what is the max log size and is it set to overwrite?
0
 
joukiejoukAuthor Commented:
Max size is 20 MB. It was set to overwrite. How can I restore any log prior to that date?
0
 
dmwynneCommented:
You need to restore a backup otherwise I think you are out of luck.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
joukiejoukAuthor Commented:
Thanks. I am trying to collect the log from a remote system to forward to my security team. What is the best approach to do this? Currently I am using event viewer MMC and connecting to the remote computer, and doing a saved log file as, but it is hosing my computer.
0
 
McKnifeConnect With a Mentor Commented:
You can copy the security logfile from C:\Windows\System32\winevt\Logs, the name is security.evtx.
0
 
BahloulCommented:
Hi,

 the default log size is 20 MB when the file getting full it removes from the old log so you must increase the log file size to gain more history but this wont fix your issue you may see the below log for log size recommendation :-

http://support.microsoft.com/kb/957662

Bahloul.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.