1. Configuring security log size
Configure security log size for Windows workstation audit data using the steps below:
- Go to Start > Windows Administrative Tools > Group Policy Management.
- In GPMC, right-click the GPO <domain name>_ADAuditPlusWSPolicy and select Edit.
- In the Group Policy Management Editor, choose Computer Configuration > Policies > Windows Settings > Security Settings > Event Log > Retention method for security log.
- Check Define these policy settings, and select Overwrite events as needed.
- Click OK.
- Select Maximum security log size and configure the values as shown below. Make sure that the security log can hold a minimum of 12 hours of data.
| Role |
Operating system |
Size |
| Windows workstation |
Windows 10, 8, 7, Vista, and XP |
512MB |
