Export (0) Print
Expand All

EventLog::MinimumRetentionDays Property

Gets the number of days to retain entries in the event log.

Namespace:  System.Diagnostics
Assembly:  System (in System.dll)

[BrowsableAttribute(false)]
[ComVisibleAttribute(false)]
public:
property int MinimumRetentionDays {
	int get ();
}

Property Value

Type: System::Int32
The number of days that entries in the event log are retained. The default value is 7.

Use the MinimumRetentionDays property to examine the current setting for an event log. Use ModifyOverflowPolicy to change the minimum number of days that each entry in the event log must be retained.

The MinimumRetentionDays value depends on the configured overflow behavior of the event log. If the OverflowAction property for an event log is set to OverwriteAsNeeded, then the MinimumRetentionDays value is 0. If the OverflowAction property for an event log is set to DoNotOverwrite, then the MinimumRetentionDays value is -1. If the OverflowAction property for an event log is set to OverwriteOlder, then the MinimumRetentionDays value is greater than zero, and represents the number of days to retain event log entries when the event log is full.

The overflow behavior only occurs when an event log reaches its size limit. When an EventLog has its OverflowAction set to OverwriteOlder, and the event log reaches its maximum size, then new entries are written only if they can replace entries whose age exceeds the MinimumRetentionDays period. Retaining event entries for a minimum period is appropriate when the event log is archived regularly. Otherwise, you risk losing new entries when the event log reaches its limit. To avoid losing new event information, set the minimum retention days for events based on your archive schedule for a particular event log.

The following example enumerates the event logs defined on the local computer, and displays configuration details for each event log.

void DisplayEventLogProperties()
{

   // Iterate through the current set of event log files, 
   // displaying the property settings for each file. 
   array<EventLog^>^eventLogs = EventLog::GetEventLogs();
   System::Collections::IEnumerator^ myEnum = eventLogs->GetEnumerator();
   while ( myEnum->MoveNext() )
   {
      EventLog^ e = safe_cast<EventLog^>(myEnum->Current);
      Int64 sizeKB = 0;
      Console::WriteLine();
      Console::WriteLine( "{0}:", e->LogDisplayName );
      Console::WriteLine( "  Log name = \t\t {0}", e->Log );
      Console::WriteLine( "  Number of event log entries = {0}", e->Entries->Count );

      // Determine if there is a file for this event log.
      RegistryKey ^ regEventLog = Registry::LocalMachine->OpenSubKey( String::Format( "System\\CurrentControlSet\\Services\\EventLog\\{0}", e->Log ) );
      if ( regEventLog )
      {
         Object^ temp = regEventLog->GetValue( "File" );
         if ( temp != nullptr )
         {
            Console::WriteLine( "  Log file path = \t {0}", temp );
            FileInfo^ file = gcnew FileInfo( temp->ToString() );

            // Get the current size of the event log file. 
            if ( file->Exists )
            {
               sizeKB = file->Length / 1024;
               if ( (file->Length % 1024) != 0 )
               {
                  sizeKB++;
               }
               Console::WriteLine( "  Current size = \t {0} kilobytes", sizeKB );
            }
         }
         else
         {
            Console::WriteLine( "  Log file path = \t <not set>" );
         }
      }

      // Display the maximum size and overflow settings.
      sizeKB = e->MaximumKilobytes;
      Console::WriteLine( "  Maximum size = \t {0} kilobytes", sizeKB );
      Console::WriteLine( "  Overflow setting = \t {0}", e->OverflowAction );
      switch ( e->OverflowAction )
      {
         case OverflowAction::OverwriteOlder:
            Console::WriteLine( "\t Entries are retained a minimum of {0} days.", e->MinimumRetentionDays );
            break;

         case OverflowAction::DoNotOverwrite:
            Console::WriteLine( "\t Older entries are not overwritten." );
            break;

         case OverflowAction::OverwriteAsNeeded:
            Console::WriteLine( "\t If number of entries equals max size limit, a new event log entry overwrites the oldest entry." );
            break;

         default:
            break;
      }
   }
}

.NET Framework

Supported in: 4.6, 4.5, 4, 3.5, 3.0, 2.0

.NET Framework Client Profile

Supported in: 4, 3.5 SP1

Show:
© 2015 Microsoft