question

GeethaO-4750 avatar image
0 Votes"
GeethaO-4750 asked JennyFeng-MSFT edited

How to ser Retentention for 90 days in Windows Workgroup servers

I have a windows group group server (Note : It is not in domain).I have to set retention period for days.
Unable to find Retention period in Local group policy , In registry we have retention in below poth, but how much we need to set has value for 90 days

A) Go to regeditHKEY_Local_MachineSystemcontrolsetServicesEventlogApplication=Retention REZ_word

windows-server
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

<<Editing the question>>

How to set Event log Retention for 90 days in Windows Workgroup servers
I have a windows group group server (Note : It is not in domain).I have to set retention period for 90 days.
Unable to find Retention period in Local group policy , In registry we have retention in below path, but how much we need to set has value for 90 days

A) Go to regeditHKEY_Local_MachineSystemcontrolsetServicesEventlogApplication=Retention REZ_word

0 Votes 0 ·

@GeethaO-4750
Hi,

Just checking in to see if the information provided was helpful.

If the reply helped you, please remember to accept as answer.
If no, please reply and tell us the current situation in order to provide further help.


0 Votes 0 ·
JanWieldraaijer-1495 avatar image
0 Votes"
JanWieldraaijer-1495 answered

Yhis may belong in "windows-server", but certainly not in "Small-basic-general" (this is for the Small Basic programming language.)

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JennyFeng-MSFT avatar image
0 Votes"
JennyFeng-MSFT answered GeethaO-4750 commented

@GeethaO-4750
Hi,
There is no settings to set Event log Retention for 90 days.
The Event Log support setting the Log size. It cannot be by number of days.

To configure settings for Application, system and security event logs:
1. Open the Group Policy Management Editor on the domain controller, browse to Computer Configuration → Policies → Administrative Templates → Windows Components → Event Log Service.
2. Select the log you need.
3. Edit Specify the maximum log file size setting - its value is usually set to 4194240 KB.
4. Specify retention settings for the log – usually Overwrite as needed.
For your reference:
Adjusting Event Log Size and Retention Settings
https://helpcenter.netwrix.com/NA/Configure_IT_Infrastructure/Windows_Server/WS_Event_Log_Settings.html
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Hope above information can help you.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Iam able to see Retention setting in Registry but my doubt is how much I need to set for 90 days as its taking value in Hexadecimal

Go to regeditHKEY_Local_Machine-->System-->controlset-->Services-->Eventlog-->Application=Retention REZ_word

0 Votes 0 ·
GeethaO-4750 avatar image
0 Votes"
GeethaO-4750 answered

Iam able to see Retention setting in Registry but my doubt is how much I need to set for 90 days as its taking value in Hexadecimal

Go to regeditHKEY_Local_Machine-->System-->controlset-->Services-->Eventlog-->Application=Retention REZ_word

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JennyFeng-MSFT avatar image
0 Votes"
JennyFeng-MSFT answered JennyFeng-MSFT edited

@GeethaO-4750
Hi,
This value is not used to set the retention time.

Please refer to the official description below:
Retention
This value is of type REG_DWORD. This value is the time interval, in seconds, in which records of events are protected from being overwritten. When the age of an event reaches or exceeds this value, it can be overwritten. This value is used to configure the circular log. If the value is a nonzero value, the event log server cannot overwrite any record until the record's age passes that value. By default, this value is 0.

Official documentation:
3.1.1.2 Event Logs
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-even/6dda2ef2-2efe-4534-bbeb-07ff44f46a10

You can only set the Log size, not number of days.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.