Security Event Viewer Log

Question

IT Depart 151

I have this issue of not able to see the past security event log except for today date in the event view.

How to retrieve or export the record for past 3 month if possible, to tracked security log who under the event id 4660 and 4663?

[ enter image description here

Had also edit in the security set, and it show maximum log size: 4129249, the archive the log when full, do not overwrite events is not selected.

Had also seleceted the date for the last 3 month also not able to search

1 answer

Answer 1

Wesley Li-MSFT 4,606 Microsoft External Staff

Hello

Unless you set event log parameters to cover long time interval, there is circullation and the oldest records are deleted.

You just need to click on each log properties :

事件查看器