-
How does Windows 2012 manage event logs retention? Does it 'rotate' logs like *NIX systems?
-
Does it automatically delete old logs when disk is full.
-
Any way to define log retention period? (e.g. delete logs older than six months)
The default retention and archiving mechanism for Windows 2012 Event Logs
loggingwindows-event-logwindows-server-2012
Related Topic
- Logrotate – How to Remove Old Logs After Reducing Rotate Value
- Windows Server – Restart/Shutdown History
- Event viewer missing logs following unexpected reboot
- Powershell – Reporting Event Log content via triggered Email Windows 2012
- Powershell – Is it possible to view events from all event logs (including “Applications and Services Logs”) simultaneously
Best Answer
Looks like Windows rotates it, and yes, there is a way to configure the retention policy. And here is a pretty good article on Managing of event logs:
https://technet.microsoft.com/en-us/library/cc766178.aspx
Hope that gonna help