Policy

Control the location of the log file

This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. If you enable this policy setting, the Event Log uses the path specified in this policy setting. If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs.

Policy
Pack Microsoft Windows
Category Windows Components / Event Log Service / System
Policy ID 55beb329d4f4
Internal name Channel_LogFilePath_4

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\EventLog\System\File

Policy notes

This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators. If you enable this policy setting, the Event Log uses the path specified in this policy setting. If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs.

Related policies

Back up log automatically when fullConfigure log accessConfigure log access (legacy)Control Event Log behavior when the log file reaches its maximum sizeSpecify the maximum log file size (KB)