Hi,
In the Default Domain Controllers Policy > Windows settings > Security Settings > Event Log I set-
Maximum security log size: 4194240 kilobytes
Retain security log: 60 days
Retention method for security log: By days
Each DC is saving 60 days worth of events, but in event viewer on one of my DCs the Security log is 378.0 MB, and when I remote to that machine I get a Logon Message error saying: The security log on this system is full.
What is this referring to if not the security log? Why isn't group policy overwriting when it needs?