Auditing: Event Log size for Application log must be at least 32768 KB

b38cea25-93f2-42d7-ac5f-f2c1e93f974a

Inadequate log size will cause the log to fill up quickly. This may prevent audit events from being recorded properly and require frequent attention by administrative personnel.

Remediation

To fix this configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Event Log Service >> Application >> "Specify the maximum log file size (KB)" to "Enabled" with a "Maximum Log Size (KB)" of "32768" or greater.

Stig: Server 2019: https://www.stigviewer.com/stig/windows_server_2019/2020-06-15/finding/V-93177
Server 2016: https://www.stigviewer.com/stig/microsoft_windows_server_2016/2021-09-29/finding/V-224937
Desktop: https://www.stigviewer.com/stig/windows_10/2021-08-18/finding/V-220779

CCI: CCI-001849
NIST 800-53: AU-4