Skip to main content

Audit Record Retention

Android

iOS

Linux

macOS

Windows

This is set by Group Policy which is maintained as part of the AUTH service, the GPO is called Security Controls - Forest Baseline and the Event Log and Advanced Audit Configuration sections contain the policies that set our logs to 50mb.
Windows Log Capacity