Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I have set up a standard MOSS installation using forms authentication with NTLM.

I have noticed that there are a lot of audit success events in the windows event log is this normal? It makes it very difficult to try and trouble shoot anything as the event log is full.

Thanks,

Dirk

share|improve this question
    
I would like to see if we can suppress auditing for a specific user. Not filtering after loging. I want to prevent auditing to the logs.. –  user5332 Oct 20 '11 at 17:07

1 Answer 1

You can either disable success audits entirely (Tired of all those "Success Audit" event entries?) or use the Filter function of Event Viewer when you are checking the logs.

share|improve this answer
    
So there is no way to stop it logging in as much? –  Anonymous Sep 24 '10 at 9:41
    
@Dirk I don't understand what you mean by no way to stop it logging in as much - it is possible not to log successful logins and the article describes how to do it. –  Marek Grzenkowicz Sep 24 '10 at 10:04
    
I have never seen so many entries in the event log. It is actually stopping getting any information about a different issue I am having with the site. –  Anonymous Sep 27 '10 at 8:06
    
@Dirk I don't understand the problem - did you try to disable success event logging or use the Filter function to hide success event? –  Marek Grzenkowicz Sep 27 '10 at 8:48
    
@Dirk What OS does your SharePoint machine use? What exactly is this different issues? –  Marek Grzenkowicz Sep 27 '10 at 8:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.