SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have set up a standard MOSS installation using forms authentication with NTLM.

I have noticed that there are a lot of audit success events in the windows event log is this normal? It makes it very difficult to try and trouble shoot anything as the event log is full.



share|improve this question
I would like to see if we can suppress auditing for a specific user. Not filtering after loging. I want to prevent auditing to the logs.. – user5332 Oct 20 '11 at 17:07

You can either disable success audits entirely (Tired of all those "Success Audit" event entries?) or use the Filter function of Event Viewer when you are checking the logs.

share|improve this answer
So there is no way to stop it logging in as much? – Anonymous Sep 24 '10 at 9:41
@Dirk I don't understand what you mean by no way to stop it logging in as much - it is possible not to log successful logins and the article describes how to do it. – Marek Grzenkowicz Sep 24 '10 at 10:04
I have never seen so many entries in the event log. It is actually stopping getting any information about a different issue I am having with the site. – Anonymous Sep 27 '10 at 8:06
@Dirk I don't understand the problem - did you try to disable success event logging or use the Filter function to hide success event? – Marek Grzenkowicz Sep 27 '10 at 8:48
@Dirk What OS does your SharePoint machine use? What exactly is this different issues? – Marek Grzenkowicz Sep 27 '10 at 8:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.