Export (0) Print
Expand All

EventLog.ModifyOverflowPolicy Method

Changes the configured behavior for writing new entries when the event log reaches its maximum file size.

Namespace: System.Diagnostics
Assembly: System (in system.dll)

[ComVisibleAttribute(false)] 
public:
void ModifyOverflowPolicy (
	OverflowAction action, 
	int retentionDays
)
/** @attribute ComVisibleAttribute(false) */ 
public void ModifyOverflowPolicy (
	OverflowAction action, 
	int retentionDays
)
ComVisibleAttribute(false) 
public function ModifyOverflowPolicy (
	action : OverflowAction, 
	retentionDays : int
)
Not applicable.

Parameters

action

The overflow behavior for writing new entries to the event log.

retentionDays

The minimum number of days each event log entry is retained. This parameter is used only if action is set to OverwriteOlder.

Exception typeCondition

InvalidEnumArgumentException

action is not a valid OverflowAction value.

ArgumentOutOfRangeException

retentionDays is less than one, or larger than 365.

InvalidOperationException

The Log value is not a valid log name.

- or -

The registry key for the event log could not be opened on the target computer.

The overflow behavior for an event log specifies what happens when new entries are to be written to a log that has reached its maximum file size.

NoteNote:

The overflow behavior takes effect only when an event log reaches its maximum file size. The overflow behavior does not affect writing a new entry to a log that can accommodate additional event log entries.

The ModifyOverflowPolicy method configures the overflow behavior of an event log. EventLog instance. After calling this method for the event log specified by the Log property, the OverflowAction and MinimumRetentionDays property values reflect the newly configured overflow behavior.

NoteNote:

This property represents a configuration setting for the event log represented by this instance. When the event log reaches its maximum size, this property specifies how the operating system handles new entries written by all event sources registered for the event log.

Set the action parameter to OverwriteAsNeeded to indicate that a new entry overwrites the oldest entry when the EventLog reaches its maximum size. If the action parameter is set to OverwriteAsNeeded, the retentionDays parameter value is ignored.

Set the action parameter to OverwriteOlder to indicate that each new entry overwrites older entries when the EventLog reaches its maximum size. Specify the number of days that events must be retained in the log using the retentionDays parameter. Events written within the retention range are not overwritten by new entries.

Set the action parameter to DoNotOverwrite to discard new events when the maximum log size is reached. If the action parameter is set to DoNotOverwrite, the retentionDays parameter value is ignored.

Caution noteCaution:

Setting the overflow policy to DoNotOverwrite specifies that new entries are discarded when the event log is full. If you use this setting, ensure the event log is regularly archived and cleared to avoid reaching its maximum size limit.

The following example displays the configured overflow policy for a specified event log, and allows the user to select a new overflow policy setting for the event log.

No code example is currently available or this language may not be supported.
// Display the current event log overflow settings, and 
// prompt the user to input a new overflow setting.
public static void ChangeEventLogOverflowAction(String logName)
{
    if (EventLog.Exists(logName)) {
        // Display the current overflow setting of the 
        // specified event log.
        EventLog inputLog = new EventLog(logName);

        Console.WriteLine("  Event log {0}", inputLog.get_Log());
        OverflowAction logOverflow = inputLog.get_OverflowAction();
        int numDays = inputLog.get_MinimumRetentionDays();
        Console.WriteLine("  Current overflow setting = {0}",
            logOverflow.ToString());
        if (logOverflow.Equals(OverflowAction.OverwriteOlder)) {
            Console.WriteLine("\t Entries are retained a minimum of {0} "
                + "days.",((Int32)numDays).ToString());
        }

        // Prompt user for a new overflow setting.
        GetNewOverflowSetting(logOverflow, numDays);

        // Change the overflow setting on the event log.
        if (logOverflow != inputLog.get_OverflowAction()) {
            inputLog.ModifyOverflowPolicy(logOverflow, numDays);
            Console.WriteLine("Event log overflow policy was modified "
                + "successfully!");
        }
        else {
            Console.WriteLine("Event log overflow policy was not "
                + "modified.");
        }
    }
    else {
        Console.WriteLine("Event log {0} was not found.", logName);
    }        
} //ChangeEventLogOverflowAction

Windows Server 2000 SP4, Windows Server 2003, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP SP2, Windows XP Starter Edition

The Microsoft .NET Framework 3.0 is supported on Windows Vista, Microsoft Windows XP SP2, and Windows Server 2003 SP1.

.NET Framework

Supported in: 3.0, 2.0

Community Additions

ADD
Show:
© 2014 Microsoft