Multiple entries for same event id errros

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

when we have an event id error of 539 or 681 there will be at least 3 entries with the same time in the security log. this makes the logs incredibly large. is there any way to have the log have only one entry for each different incident? thanks
 
That seems to be the nature of the beast and I know of know way to change it. I
believe the operating system will purposely retry failed logons a number of times
which is one reason not to set account lockout threshold too low. Ten should be an
absolute minimum. --- Steve


railroader said:
when we have an event id error of 539 or 681 there will be at least 3 entries with
Click to expand...
the same time in the security log. this makes the logs incredibly large. is there any
way to have the log have only one entry for each different incident? thanks
 
Back
Top