Configuring security log size and retention settings

Configuring security log size

Configure security log size for Windows workstation audit data using the steps below:

• Go to Start > Windows Administrative Tools > Group Policy Management.
• In GPMC, right-click the GPO <domain name>_ADAuditPlusWSPolicy and select Edit.
• In the Group Policy Management Editor, choose Computer Configuration > Policies > Windows Settings > Security Settings > Event Log > Retention method for security log.



• Check Define these policy settings, and select Overwrite events as needed.
• Click OK.
• Select Maximum security log size and configure the values as shown below. Make sure that the security log can hold a minimum of 12 hours of data.

Role	Operating system	Size
Windows workstation	Windows 10, 8, 7, Vista, and XP	512MB