Configuring Event Log Settings for EMC Storage Devices

By default event log size is configured to 512KB. To change event log size, first we have to change the default location of event log file.

1. Create a new volume in EMC file system
2. Create a new hidden share in the above volume
3. Run -> regedit → File → Connect  Network Registry →  Type the EMC CIFS server name
4. Navigate to HKEY_LOCAL_MACHINE → System → CurrentControlSet → Services → Eventlog → Security → Security
   

5. Provide the local path of the hidden share created in the step 1 in the key Name (File -> <Local Path of the Audit Log>).
6. Configuring Event Log Archive
   1. Run -> eventvwr → Right Click Event Viewer → Connect  to Another Computer →  Type the EMC CIFS server name
   2. Navigate to Security Log → Right Click Properties → Select Do not overwrite events
      
   3. Run -> regedit → File → Connect  Network Registry →  Type EMC CIFS server name
      
   4. Navigate to HKEY_LOCAL_MACHINE → System → CurrentControlSet → Services → Eventlog → Security → Security
   5. Configure the below archive settings
   1. AutoArchiveEnabled = 1
   2. AutoArchiveTriggerPolicySize =512mb
   3. AutoArchiveRetentionPolicySize=10gb