Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • I have realized that in the folder C:\Windows\System32\winevt\Logs I have about 22 files of 20MB with archived logs. So it means that the event view only show the last log file. But It means that each hour it is about20MB. Commented Oct 18, 2023 at 10:06
  • That's actually good news. I have updated my answer with some added info that will likely help you. Commented Oct 18, 2023 at 10:19
  • If you still want to avoid third-party software increase the file size limit to 20x the current size. This will let you see all events in the same amount of space that 22 20MB files hold. You don’t mention your archive data retention policies
    – Ramhound
    Commented Oct 18, 2023 at 11:39