Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. Number of audit messages discarded: %1

Details
Product: Windows Operating System
Event ID: 516
Source: Security
Version: 5.0
Component: Security Event Log
Symbolic Name: SE_AUDITID_AUDITS_DISCARDED
Message: Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. Number of audit messages discarded: %1
   
Explanation

This event record indicates that audit event records have been discarded, due to overwriting of earlier records or due to cessation of auditing, depending on the audit policy you have established; or by internal event queues exceeding their maximum length.

Related:

Leave a Reply