When viewing an Event Logs properties (in Server 2008) you can set three actions for what to happen when the maximum event log size has been reached:
- Overwrite events as needed
- Archive the log when full
- Do not overwrite events
Using Powershell I can use limit-eventlog to set the event log retention to set the OverflowAction to DoNotOverwrite or OverwriteAsNeeded, but I cannot seem to be able to get the Archive the log when full action selected.
Any ideas how I could select this option via powershell?
The only way (IMO) is to modifying the
registry. Here an example to set ‘Archive the log when full’ action for the Application log:if the options have been selected previously, the key is already present so just need set to 1 the key value: