Retention method for system log

This security setting determines the "wrapping" method for the system log.

If you do not archive the system log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events as needed.

If you archive the log at scheduled intervals, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events by days and specify the appropriate number of days in the Retain system log setting. Make sure that the Maximum system log size is large enough to accommodate the interval.

If you must retain all the events in the log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Do not overwrite events (clear log manually). This option requires that the log be cleared manually. In this case, when the maximum log size is reached, new events are discarded

Note: This setting does not appear in the Local Computer Policy object.

Policy path: 

Computer Configuration\Windows Settings\Security Settings\Event Log

Comments: 

Note: This setting does not appear in the Local Computer Policy object.

Default: 

None.

Supported on: 

Only Windows XP SP2, Windows Server 2003

Registry settings: 

Event Log security settings are not registry keys.

Reboot required: 

No

Related content