Application events do not overwrite Application log (Windows)

Module: System Auditing

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports a problem when the system can overwrite the Application event log.

The following table lists the error message for the check.

Table: Error message for Application events do not overwrite Application log

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_LOG_OVERWRITE_APPLN

Category: Policy Compliance

  • Windows 2000 (106144)

  • Windows 2003 (206144)

  • Windows 2008 (249144)

  • Windows Vista (229144)

  • Windows XP (201144)

Title: Application event log will be overwritten

Description:The application event log is set to permit overwriting. Information in the application event log can be lost.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]