What is the Maximum size of a EventMessage or Event Data in Event Viewer. For Security channel and other channels System, Direcory Service.

Bakya ABL 21 Reputation points
2024-05-15T10:27:43.9533333+00:00
  1. What is the maximum size of a single event in Event viewer?
  2. Event message maximum length and a Event's size in kb?
  3. Does it vary for Security channel and System/ Directory Server channels?
Windows Forms
Windows Forms
A set of .NET Framework managed libraries for developing graphical user interfaces.
1,846 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,822 questions
Windows API - Win32
Windows API - Win32
A core set of Windows application programming interfaces (APIs) for desktop and server applications. Previously known as Win32 API.
2,438 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,737 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Hania Lian 8,381 Reputation points Microsoft Vendor
    2024-05-16T01:41:39.7333333+00:00

    Hello,

    The maximum event log size for Windows Server 2008 is 4194240 KB (4 GB) due to the 32-Bit limitation of the operating system. On 64-Bit operating systems it can go much higher, in theory up to 17179874884 KB (16 TB) as that is the file system (NTFS) limitation.

    The maximum length of an event message is 32,766 characters. The size of an event in KB depends on the amount of data being logged.

    It can vary for Security channel and System/Directory Server channels based on the type and amount of data being logged.

    Best Regards,

    Hania Lian


    If the Answer is helpful, please click "Accept Answer" and upvote it.