Auditing: Event Log size for Security log must be at least 196608 KB

f9befa07-2636-4c53-a43f-db2035b9cdff

Inadequate log size will cause the log to fill up quickly. This may prevent audit events from being recorded properly and require frequent attention by administrative personnel.

Remediation

To fix this configure the policy value for
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Event Log Service
|_ Security
|_"Specify the maximum log file size (KB)" to "Enabled" with a "Maximum Log Size (KB)" of "196608" or greater.

STIG:
Server
2022: https://stigviewer.com/stigs/microsoft_windows_server_2022/2023-09-11/finding/V-254359
2019: https://stigviewer.com/stigs/microsoft_windows_server_2019/2023-09-11/finding/V-205797

Desktop:
W11: https://stigviewer.com/stigs/microsoft_windows_11/2023-09-29/finding/V-253338
W10: https://stigviewer.com/stigs/microsoft_windows_10/2023-09-29/finding/V-220780

CCI: CCI-001849
NIST 800-53 rev4/rev5: AU-4

Auditing: Event Log size for Security log must be at least 196608 KB

Remediation

Tags

Your Privacy Choices