Limiting Event Log file size

Limiting Event Log file size

Post by Sm9l » Sun, 29 May 2005 01:08:03

I am using the EWF RAM mode on my CF drive and redirected the log files to a
512K second drive. I tried limiting the event log file size (Application,
Security and System) using the MaxSize registry parameters. i.e.

Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
Name: MaxSize
Value: 0x00002000 (8192)


I disabled the event log service, rebooted and deleted the old log files.
After restarting the service, I expected that the file should be limited to
8K but instead, the system still creates 64k files for all three log files
independent of my settings.

Does this mean that the minimum file size is 64K? i.e. values less than 64K
are not allowed and is this documented somewhere?

Is it a bug? i.e. 64K initial size as opposed to the lower MaxSize parameter

Can I assume that if I set the limit to 64K that this will be actual maximum?


Limiting Event Log file size

Post by KM » Sun, 29 May 2005 02:51:15


The MaxSize value must be 0x10000 to 0xFFFF0000, in 64K increments.

Yes, you can.