locked
MOSS 2007 Event Log Archive RRS feed

  • Question

  • MOSS 2007 is creating an event log archive several times a day and ends up consuming as much as 1GB a day.  Each of the archives is varies between 1MB and 30MB each.  They are being stored C:\Windows\System32\winevt\Logs

     

    Any ideas how I can either prevent this from happening or decrease the frequency?

    Friday, March 11, 2011 4:53 PM

Answers

  • You can go into Central Administration and change *what* is being logged. You can't decrease the frequency (as it is available for logging all the time) but you can make major changes in what is being logged.

    In the 2007 CA this is still very clumsy and you need to look at the settings for all 16 (or so) different things that can be logged to make sure that just one of them isn't set to log everything in sight.  (Voice of experience - I once checked about 10 of these and found that they were all set to the same reasonable setting and so assumed [it was late] that the rest were too. Naturally one wasn't and we kept running out of space).


    SP 2010 "FAQ" (mainly useful links): http://wssv4faq.mindsharp.com/default.aspx
    WSS3/MOSS FAQ (FAQ and Links) http://wssv3faq.mindsharp.com/default.aspx
    Both also have links to extensive book lists and to (free) on-line chapters
    • Marked as answer by David HM Monday, March 21, 2011 1:18 AM
    Friday, March 11, 2011 5:10 PM