Join or sign in Register for your free TechRepublic membership or if you are already a member, sign in using your preferred method below. Use Your Email Use FacebookUse Linkedin

Why are the event logs not overwriting as needed?

Locked

Some of our servers’ event logs are exceeding the maximum size even though they are set to “overwrite events as need”. Can anyone please explain why this may happen? Shouldn’t they be overwritten on the fly? Thanks!

Topic

Clarifications

In reply to Why are the event logs not overwriting as needed?

Clarifications

Have you tried to reset (reapply) the setting?

In reply to Why are the event logs not overwriting as needed?

You might need to reapply the setting(s) for the server to recognize the setting. Sometimes computers forget their instructions, so you have to re-teach it.

Please post back if you have any more problems or questions.

Resetting the settings doesn’t work

In reply to Have you tried to reset (reapply) the setting?

Thanks for the suggestion. Unfortunately it doesn’t work. i tried it on several servers. I might just have to clear the logs manually.

Check out this link

In reply to Why are the event logs not overwriting as needed?

http://technet2.microsoft.com/windowsserver/en/library/5a86ab0f-c7eb-45ed-9e5e-514173bf15e31033.mspx?mfr=true

technet link

In reply to Check out this link

Thanks for that mate. Don’t know if it will help me solve this issue but certainly some useful info there.

Let us

In reply to technet link

know how you get on.

Clearing event logs does not help

In reply to Let us

I manually cleared the logs but they still eventually build again and overflow. I have checked with the Infrastructure team here and they confirm the GPO is set correctly. So, still looking into this…

Event Log Policy Settings

In reply to Clearing event logs does not help

http://technet2.microsoft.com/windowsserver/en/library/5a86ab0f-c7eb-45ed-9e5e-514173bf15e31033.mspx?mfr=true

[Author]

Replies