


Applications and Services logs>Microsoft>Windows>DNS-Server>Audit (only for DCs running Windows Server 2012 R2 and above)Īpplications and Services logs > AD FS >Admin log (for AD FS servers ).

Applications and Services logs >Microsoft>Windows>TaskScheduler>Operational.To prevent overwrites, you can increase the maximum size of the event logs and set retention method for these logs to “ Overwrite events as needed”. Adjusting Event Log Size and Retention SettingsĬonsider that if the event log size is insufficient, overwrites may occur before data is written to the Long-Term Archive and the Audit Database, and some audit data may be lost.
