Limiting Event Log file size

I am using the EWF RAM mode on my CF drive and redirected the log files to a
512K second drive. I tried limiting the event log file size (Application,
Security and System) using the MaxSize registry parameters. i.e.

Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Application
Name: MaxSize
Type: REG_DWORD
Value: 0x00002000 (8192)

etc...

I disabled the event log service, rebooted and deleted the old log files.
After restarting the service, I expected that the file should be limited to
8K but instead, the system still creates 64k files for all three log files
independent of my settings.

Does this mean that the minimum file size is 64K? i.e. values less than 64K
are not allowed and is this documented somewhere?

Is it a bug? i.e. 64K initial size as opposed to the lower MaxSize parameter
setting?

Can I assume that if I set the limit to 64K that this will be actual maximum?

Thanks,
Joe
.

Relevant Pages

  • Re: Cannot access to Event Viewer
    ... This issue can occur if you system partition is full or the event log files ... Delete temporary files on the system boot partition. ... Set the start type of "Event log" to disabled. ...
    (microsoft.public.win2000.security)
  • Re: IIS 5.1 in XP Pro SP2, Cant view ASP web page.
    ... the event log, and that is where you have more information. ... Kenny wrote:> Following are the copied from log files: ... >> The error message you see is a general error message. ...
    (microsoft.public.inetserver.iis)
  • RE: Application Event Log Issue
    ... > Thank you for posting in SBS newsgroup. ... The Event log files are totally damaged. ...
    (microsoft.public.windows.server.sbs)
  • Re: Possible hack?
    ... Okay so this log was not deleted, it looks more like the Event log service ... full admin rights so you will find it very difficult to track him. ... > missing from the log files. ... >> However depending on the setup of your logging, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Application Event Log Issue
    ... I had to do a reboot after installing some security ... > Thank you for posting in SBS newsgroup. ... The Event log files are totally damaged. ...
    (microsoft.public.windows.server.sbs)