I have logging (text logging) set up on our windows 2008 server. The log file properties are: create a new log file daily and when disk is full delte older log files. I am loggin gthe following information accounting requests, authentication
requests, periodic accounting status, periodic authentication status, and if logging fails discard connection requests. When I look at the event log I see event ID 6278, 6276, 6274, 6272. but they are only accumulating for view for about 3 to 4 hours.
I see event ID 4400 and 18 for months. the files in windows\sustem32\logfiles are (IN11xxxx) are holding weekly data. What I woukld like to do is hold more data to view for a day or so and get rid of the 4400 and 18 event IDs