Discussion Locked

Event log clogs up

0 helpful
12 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have 22 Domain controllers all scattered around UK. They are all under one domain. My problem is that the event log keeps filling up. I have tried everything to stop the event audit replicating between the sites. It has got to a point where I have to clear the logs daily. PLEASE can somebody tell me what to do

12 replies

by swampdoc

Set you event log files to overwrite as needed and make sure they are big enough. Right click on each area (system, application, etc...), click on properties and change the file size to something like 5120 (thats only 5mb) and click on the overwrite as needed radio dot. Hope this helps.

by oisere

Than you for your help, the size was already over 200mb. Yet filling up within 1 day.

by bfilmfan

I would follow the previous commenter's advice with on change. Set the security log file size to 50 megabytes, but do not set overwrite as needed. If there is a security-related event, you will need this log file to investigate, document and resolve issues.

by oisere

Than you for your help, the size was already over 200mb. Yet filling up within 1 day.

by bfilmfan

The security log is filling up over 200 MB in a day?

What failure, success events are you monitoring?

by swampdoc

Exactly WHICH log is 250mb (there should be at least 3) and what is the size of the others?

by swampdoc

I would make sure to uncheck Information and Success Audit in the filtering. I would also look at setting the Overwrite evenst as needed to on and leave the size set at 256000 (where you are now). Could you tell me what seems to be the most common entry? Even with 22 servers in a domain, this does seem to be way out of whack. How many users are you supporting?

This discussion is closed to new replies.