Solved

Security Event Log Size 2012 R2

Posted on 2016-11-02
4
25 Views
Last Modified: 2016-11-21
There is conflicting information regarding the size of the security event log. Some articles mention that the file is always loaded into memory in full, others say that the way the event log is loaded into memory has changed and that setting a larger size is no longer an issue.

Let's say, that for example I have a 4GB event log, will the full file be loaded into RAM? OS version is Windows Server 2012 R2.
0
Comment
Question by:albatros99
  • 2
  • 2
4 Comments
 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 500 total points
ID: 41871159
I would simply make a test to find out. Use a script that uses eventcreate.exe in a loop to fill up the log and at the same time, open task manager and watch your RAM consumption.
0
 
LVL 3

Accepted Solution

by:
albatros99 earned 0 total points
ID: 41872420
A 3.2 GB security log shows up in RamMap with 842'542 KB Total and 593'240 KB standby. Clearly it uses more memory but it doesn't load the whole file. I was just hoping this new behaviour would be documented somewhere.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 41872433
Hm - when does it show up, right after a restart or after it has been loaded to memory after using eventvwr?
0
 
LVL 3

Author Closing Comment

by:albatros99
ID: 41895646
Solution discovered by testing.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
How do we balance the user experience (UX) with reasonable security measures? It can be done, if you keep these fundamentals in mind.
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question