Archive Application events log when full (Windows)

Module: System Auditing

Supported Platforms: Windows 2008, Windows Vista

This check reports a problem when application event log entries can be overwritten and if logs are not archived when it is full.

The following table lists the error message for the check.

Table: Error message for Archive Application events log when full

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_LOG_OVERWRITE_ARCHIVE_APPLN

Category: Policy Compliance

  • Windows 2008 (249146)

  • Windows Vista (229146)

Title: Application events do not archive logs when it is full

Description:The application event log is not set to permit archival. The logs will not be archived when it is full.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]