locked
Event log size limitation removed from R2? RRS feed

  • Question

  • All current versions of Windows have a max size limitation of 4GB of any event log, however, that was never accurate, as it has been since documented by Microsoft that it theoretically is limited to about 300 MB due to contiguous memory requirements (Threats and Countermeasures and other security guides document this).
    I've heard that this theoretical limit has finally been removed and no longer any issue starting with WS08 R2. Is this true? If so, can anyone point me to any Microsoft documentation as to this architectural change and limitation removal?
    Thanks!
    Monday, January 4, 2010 5:40 PM

Answers

  • Hi,

     

    As far as I know, there is no maximum size for event Log in Windows Server 2008 and Windows Server 2008 R2.

     

    If you set a very large value in Windows Server 2008 and Windows Server 2008 R2, it will say the maximum log size could be set is 18014398509481983KB. 18014398509481983KB is 17179869184GB and  the event logs can grow to whatever disk space is available.

     

    Although the event Log size is unlimited, the recommended maximum size for each log is 4GB. Setting the size lager than 4GB may cause potential issues.

     

    For additional information about recommended settings for event log sizes, please refer to the following article:

     

    Recommended settings for event log sizes in Windows Server 2003 and in Windows Server 2008

    http://support.microsoft.com/kb/957662

     

    Hope it helps.

     

    Tim Quan - MSFT

    • Marked as answer by Jorree Wednesday, January 6, 2010 5:36 PM
    Wednesday, January 6, 2010 5:28 AM
    Moderator

All replies

  • Hi,

     

    As far as I know, there is no maximum size for event Log in Windows Server 2008 and Windows Server 2008 R2.

     

    If you set a very large value in Windows Server 2008 and Windows Server 2008 R2, it will say the maximum log size could be set is 18014398509481983KB. 18014398509481983KB is 17179869184GB and  the event logs can grow to whatever disk space is available.

     

    Although the event Log size is unlimited, the recommended maximum size for each log is 4GB. Setting the size lager than 4GB may cause potential issues.

     

    For additional information about recommended settings for event log sizes, please refer to the following article:

     

    Recommended settings for event log sizes in Windows Server 2003 and in Windows Server 2008

    http://support.microsoft.com/kb/957662

     

    Hope it helps.

     

    Tim Quan - MSFT

    • Marked as answer by Jorree Wednesday, January 6, 2010 5:36 PM
    Wednesday, January 6, 2010 5:28 AM
    Moderator
  • Great, thanks!
    Wednesday, January 6, 2010 5:37 PM