Specify the maximum log file size (KB)
This computer policy limits the maximum size of the Windows Application log file.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application\MaxSize
This computer policy limits the maximum size of the Windows Application log file. MaxSize is a REG_DWORD value whose data represents the size in kilobytes.
The supported range is 1024 KB through 2147483647 KB. When the policy does not apply, Windows uses the locally configured maximum log size.
Notes
Security
The capacity of the Application log affects how long its events remain available for monitoring and investigation. A low limit can cause relevant history to be lost sooner: depending on separately configured retention and backup policies, Windows either overwrites older events or discards new events after the log becomes full.
This setting does not change access permissions on the log, event generation, audit policy, or event forwarding.
Possible side effects
A larger value allows the log file to grow further and can therefore increase disk-space consumption. Under a high event volume, a smaller value shortens the available history and can make application and service failures harder to diagnose.
Notes
This setting controls only the size limit. Separate retention, overwrite, and automatic-backup policies determine what happens when the log reaches that limit.
The policy-backed MaxSize value is expressed in kilobytes. It should not be treated as equivalent to identically named values under other event-log registry paths, where the unit can differ.
Microsoft documentation
Microsoft Learn: Policy CSP – EventLogService
Microsoft Learn: Windows security baseline reference