EventID for Event log full?

UncleBensSauce · 27 Jan 2010 at 14:08

Hi All

At the moment I'm trying to find out if there's an event for the App/System event logs on windows - once the log is full?

I've googled with no joy - though I can understand why this eventID might not exsist (the logs full so it can't be written in anyway?!)

Anyone know of another way of detecting when the Windows Event Log is full?

Maybe a WMIC Command? (need something that doesn't depend on powershell or VBS)

Ta

Yamahahahahaha · 27 Jan 2010 at 15:50

I believe it happens when you get to the domain login screen.

A box should pop up informing you that the Event Viewer Log (x) is full.

morfmedia · 30 Jan 2010 at 17:45

Why not set in the GPO that the event logs automatically roll over rather than set to fixed size with no overwrite? If one of the logs gets full (can't remember which of the three, then you can't login etc....)

tonyyeb · 2 Feb 2010 at 10:13

morfmedia said:
Why not set in the GPO that the event logs automatically roll over rather than set to fixed size with no overwrite? If one of the logs gets full (can't remember which of the three, then you can't login etc....)

System log I believe.

CrimsonAvenger · 4 Feb 2010 at 07:39

morfmedia said:
Why not set in the GPO that the event logs automatically roll over rather than set to fixed size with no overwrite? If one of the logs gets full (can't remember which of the three, then you can't login etc....)

What he said. Makes perfect sense. If you've got an ongoing issue a log of a reasonable size even tho its getting rolled over will show up.