none
I want to change eventerrors application logs from overwrite events as needed to Archive the log when full, do not overwrite events RRS feed

  • Question

  • Hi 

    I want to change eventerrors application logs from overwrite events as needed  to Archive the log when full, do not overwrite events

    

    Please let me know how to do it .

    I just select archive the log when full but its not making archives.

    Thanks in advance,

    Phanindra.

    Tuesday, October 9, 2018 10:31 AM

Answers

  • Hi Phanindra_ch,

    following is a snapshot of my application log properties.


    Mandar Dharmadhikari

    • Marked as answer by Phani_B Thursday, October 11, 2018 3:12 PM
    Wednesday, October 10, 2018 10:53 PM
    Moderator

All replies

  • Which server version?

    Please check this topic
    https://social.technet.microsoft.com/Forums/windows/en-US/2570117d-537f-490d-a373-e5a347d1ce45/event-logs-archive-log-when-full?forum=win10itprogeneral

    As I understand what you want to do might not work OOB

    /Peter


    When asking a question please be as thoroughly as possible this will make it easier to assist you http://www.catb.org/esr/faqs/smart-questions.html

    Tuesday, October 9, 2018 11:00 AM
  • BIztalk 2016 and in 2010

    What is OOB?

    In some searches I have seen we have to enable event logs in security policies 

    windows component->eventlogs

    but i havent find eventlogs in the list.

    The above link you have given is for security logs archive but I need to archive application logs only

    I enabled Backup automaticallywhen full by going below path .

    Local group policyà  Computer ConfigurationàAdminstrative TemplatesàWindows ComponentàEventLog ServicesàApplication àEnabled backup log automatically.

    Is this change helpfull?

    Thanks in advance


    • Edited by Phani_B Tuesday, October 9, 2018 4:32 PM
    Tuesday, October 9, 2018 12:12 PM
  • The change should work fine irrespective of the log type, is not working after changing the settings??

    EDIT-- Tested this on my old windows server 2008 and windows 10 also, at both places the logs are getting archived. Have you checked the %SystemRoot%\System32\Winevt\Logs\Application.evtx folder for the archive?


    Mandar Dharmadhikari



    Tuesday, October 9, 2018 11:01 PM
    Moderator
  • OOB = Out of the Box (e.g. built in).

    Looking at that thread that was linked to, looked like there is a bug in Windows 10?   Is that the version of operating system you are using?

    Wednesday, October 10, 2018 12:47 AM
  • windows server 2016
    Wednesday, October 10, 2018 11:51 AM
  • HI Mandar,

    What is the log size u have given ?


    Wednesday, October 10, 2018 11:52 AM
  • Hi Phanindra_ch,

    following is a snapshot of my application log properties.


    Mandar Dharmadhikari

    • Marked as answer by Phani_B Thursday, October 11, 2018 3:12 PM
    Wednesday, October 10, 2018 10:53 PM
    Moderator
  • Hi Mandar,

    I tried by changing overwritten to archive without changing any setting it archive first but later id didnt.

    have edited anything ?

    Friday, October 12, 2018 1:30 PM