Control the location of the log file

This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to administrators.

If you enable this policy setting, the Event Log uses the path specified in this policy setting.

If you disable or do not configure this policy setting, the Event Log uses the folder %SYSTEMROOT%\System32\winevt\Logs.

Supported on: At least Windows Vista

Log File Path

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\EventLog\Setup
Value NameFile
Value TypeREG_SZ
Default Value

eventlog.admx

Administrative Templates (Computers)

Administrative Templates (Users)