Share via

Security Event Viewer Log

IT Depart 151 Reputation points
Feb 15, 2023, 9:17 AM

I have this issue of not able to see the past security event log except for today date in the event view.

How to retrieve or export the record for past 3 month if possible, to tracked security log who under the event id 4660 and 4663?

[enter image description here

](https://i.stack.imgur.com/KJU8v.jpg)

Had also edit in the security set, and it show maximum log size: 4129249, the archive the log when full, do not overwrite events is not selected.

Had also seleceted the date for the last 3 month also not able to search

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,811 questions
Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,576 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,723 questions
Windows Network
Windows Network
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.Network: A group of devices that communicate either wirelessly or via a physical connection.
828 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,902 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Wesley Li-MSFT 4,526 Reputation points Microsoft Vendor
    Feb 16, 2023, 6:45 AM

    Hello

    Unless you set event log parameters to cover long time interval, there is circullation and the oldest records are deleted.

    You just need to click on each log properties :

    事件查看器

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.