18.10.26.1.1 (L1) Ensure 'Application: Control Event Log behavior when the log file reaches its max

18.10.26.1.1 (L1) Ensure 'Application: Control Event Log behavior when the log file reaches its maximum size' is set to 'Disabled' (Automated)

Description

This policy setting controls Event Log behavior when the log file reaches its maximum size.

If new events are not recorded it may be difficult or impossible to determine the root cause of system problems or the unauthorized activities of malicious users.

EventLogService Policy CSP - Windows Client ManagementMicrosoftLearn

OMA-URI

./Device/Vendor/MSFT/Policy/Config/EventLogService/ControlEventLogBehavior

Recommended Setting

Format:chr (string) Value: Disabled

Settings Catalog

YES

Administrative Templates\Windows Components\Event Log Service\System

Control Event Log behavior when the log file reaches its maximum size