Edit

About Us

We must explain to you how all seds this mistakens idea off denouncing pleasures and praising pain was born and I will give you a completed accounts off the system and expound.

Contact Info

Technology QuestionsCategory: technololgyHow To Change Event Log Viewer Size Configuration
Selenium Site Administrator Staff asked 9 months ago

It is recommended to change the default event viewer log size configuration in Windows Server 2012, 2016, or 2019.

It’s best to do this to ensure that the event logging process can successfully write enough log information into the log, without getting overwritten too quickly.

From a security perspective, you want to keep as many log entries as possible.

Here are our recommendations

 

Event Log Viewer Size Configuration

  • Application: Maximum log size — 32,768 KB
  • Security: Maximum log size— 196,608 KB
  • Setup: Maximum log size —32,768 KB
  • System: Maximum log size — 32,768 KB

You can go higher, but the above values will work well.

To configure the event log size and retention method

  1. On your windows server, navigate to Start → Windows Administrative Tools (Windows Server 2016) or Administrative Tools (Windows 2012 R2 and below) → Event Viewer.
  2. Navigate to Event Viewer tree → Windows Logs, right-click Security and select Properties.Make sure logging is enabled.
  3. Enable logging, although it should already be enabled.
  4. Change the Maximum log size (KB).
  5. Hit apply.

 

Two things you should be doing.

  1. Checking the logs using an automated (SIEM) tool or checking the logs daily depending on your situation.
  2. Saving the logs weekly to a repository for backups.
  3. Create a review process for the logs.

The information in these logs is valuable to diagnosing problems, and solving small problems before they turn into huge problems.

Our cyber security centre manages these logs and communications across all systems, 24/7. For more information on this services, visit our security operations centre (SOC) page.

The Selenium Group Team

 

 

 

 

 

 

 

Selenium Technology Partners Logo

Selenium Technology Partners - Copyright © 2000-2021.