How to set Event-Log Retention by days instead of size

David Muchechetere 20 Reputation points
2023-07-07T12:09:54.1533333+00:00

I found this guide to set log retention by days but I don't know where exactly to input this data https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-gpsb/0b9673a7-ce0a-49b4-912b-591efdb37cdf

Header = "[" HeaderValue "]" LineBreak
 HeaderValue = "System Log" / "Security Log" / "Application Log"
 Settings = Setting / Setting Settings
 Setting = Key Wsp "=" Wsp Value LineBreak
 Key = "MaximumLogSize" / "AuditLogRetentionPeriod" 
       / "RetentionDays" / "RestrictGuestAccess"
            
 Value = 1*8DIGIT

Can somebody lead me in the right direction?

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,702 questions
0 comments No comments
{count} votes

Accepted answer
  1. Ian Xue 39,466 Reputation points Microsoft Vendor
    2023-07-10T06:18:05.92+00:00

    Hi,

    This is the format of the messages transported by the Group Policy: Security Protocol Extension over the SMB Protocol. To set Event Log Retention, just configure the group policy settings under Computer Configuration - Policies -Windows Settings - Security Settings - Event Log. Select Overwrite events by days in the Retention method for system log and specify the appropriate number of days in the Retain system log setting.

    Best Regards,

    Ian Xue

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.