RSA Admin

Clearing Windows Event Logs

Discussion created by RSA Admin Employee on Mar 26, 2012
Does enVision clear the Windows event logs after it collects them via the agentless collection method? If not, is there a way to do that automatically? Relying on configuring Windows properties to overwrite events based on event log size or number of days is not realistic when dealing with logs that may contain sensitive information.

Outcomes