I have followed https://docs.microsoft.com/en-us/troubleshoot/windows-server/application-management/move-event-viewer-log-files but log location is still in default location (after couple of restarts).
Why?


I have followed https://docs.microsoft.com/en-us/troubleshoot/windows-server/application-management/move-event-viewer-log-files but log location is still in default location (after couple of restarts).
Why?


Hi,
Could you use the command below to move?
wevtutil sl security /lfn:"D:\Logs\Security.evtx"
Also check the log path under group policy.
Computer Configuration | Administrative Templates | Windows Components | Event Log Service
Under Security configure Log File Path
Hope this helps and please help to accept as Answer if the response is useful.
Best Regards,
Carl
7 people are following this question.