Skip to main content

Audit Record Retention

Android​

iOS​

Linux​

macOS​

Windows​

This is set by Group Policy which is maintained as part of the AUTH service, the GPO is called Security Controls - Forest Baseline and the Event Log and Advanced Audit Configuration sections contain the policies that set our logs to 50mb.
Windows Log Capacity