Event Logs are getting Cleared on its own

Question

Dear Community,

I have noticed that one of my Domain Controller logs are getting cleared on its own for the last 2 Months.

I did not delete them & I did not create any such Policy either.

Kindly help me out in this regard.

Thanks.

Answer 1

Hello Seema Kanwal Gurmani,

Thank you for posting in Q&A forum.

If your event logs are being cleared automatically, it could be due to several reasons:

1. Log Size Limit: Event logs have a maximum size limit. Once this limit is reached, older entries are overwritten. You can check and increase the log size limit:
   • Open Event Viewer.
   • Right-click the log you want to configure (e.g., Application, System).
   • Select Properties.
   • Increase the Maximum log size and choose Overwrite events as needed.
2. Scheduled Task or Script: Check the Task Scheduler for any tasks that might be doing this.
3. Group Policy: You can check this by running gpedit.msc and navigating to Computer Configuration > Administrative Templates > Windows Components > Event Log Service.
4. Malware: Run a full system scan with your antivirus software to rule this out.
5. Event Log:  You can check the Security log for events that indicate log clearing.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.