Change Security event log to only log failures

[snella]

Hi,

Does anyone know if it is possilbe to amend the Security event log so that only failures are logged and if so how to do it.

Thanks for any help
Alan

 

[shrubble]

Right click 'my computer' -> click 'manage' -> expand the log tree -> right click 'Security' -> click 'properties' -> click the 'filter' tab.

Choose what you like and click 'apply'

"I would rather have a free bottle in front of me, than a pre-frontal lobotomy..."

-Shrubble

http://www.ishrubble.com

 

[snella]

Sorry, I think I may have put this in the wrong forum, the problem I have is our Domain controllers log so many events they overwrite themselves after about 8 hours, I could increase the log size but as another option I was wondering if I could edit the registry so only failures are logged so as to save space. Am I right in thinking that using the filter tab will only change what I can see not what is logged.

Thanks for any help
Alan

 

[bcastner]

You are correct. Unfortunately, I do not think there is a registry entry to do what you want.