Redirecting security logs to net storage - Windows 2008 R2 Enterprise


  • We keep all of our security logs from our DC's and as you would expect, they kill the disk space. Currently we set the logs to auto archive at 300Mb and I move them manually to a netshare. I have tried changing the path for the logs in event properties as well as the registry and tried using a mapped path as well as the full path name, does not work. I also stopped the event service, moved the Security.evtx log to the new location and restarted the machine, it continues to place the logs in the default location. Is it not possible to redirect the sec logs to a netshare? Am working with a Microsoft tech and he sent me some info that Windows 2003 cannot move them to a netshare. Any idea if 2008 R2 is the same?
    Monday, February 27, 2012 5:25 PM


All replies