| Details | |
| Product: | Windows Operating System |
| Event ID: | 516 |
| Source: | Security |
| Version: | 5.0 |
| Component: | Security Event Log |
| Symbolic Name: | SE_AUDITID_AUDITS_DISCARDED |
| Message: | Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. Number of audit messages discarded: %1 |
| Explanation | |
|
This event record indicates that audit event records have been discarded, due to overwriting of earlier records or due to cessation of auditing, depending on the audit policy you have established; or by internal event queues exceeding their maximum length. |
|