none
Best Practice for Event Log Monitoring RRS feed

  • Question

  • I would like to know the best practice for retaining windows event log.

    Application log, security log get overwritten, i would like to know what is the standard practice for these logs

    Please can anyone link me with relevant data in this respect?

    Thank you.

    Monday, August 15, 2011 4:57 PM

Answers

  • 512kb

    usually is good to append your logs. But i would suggest you do aweekly review, it also depends if your company has any retention policy ?

    i would reccomend weekly review.. otherwise if you wish to archive it.. you can export and clear the logs.
    Guowen Su | CCNA, CCIP, MCP, MCSA, MCSE, MCTS, MCITP, CEH | http://www.microsoft.com/en/sg/default.aspx Our Goal? VERY SATISFIED Customers. If you're not...let's talk!! Please don't vote me for answers... because i do not want others to feels that i'm cheating ? :) In any case God knows :)
    • Proposed as answer by Soh.M Thursday, August 18, 2011 3:14 AM
    • Marked as answer by Kevin Remde Saturday, November 12, 2011 1:07 PM
    Thursday, August 18, 2011 3:14 AM