Modify the configuration of a log. Usage: wevtutil { sl | set-log } LOGNAME /OPTION:VALUE /OPTION:VALUE . LOGNAME String ...

Modify the configuration of a log.  Usage:  wevtutil { sl | set-log } LOGNAME [/OPTION:VALUE [/OPTION:VALUE] ...]  LOGNAME String that uniquely identifies a log. If option /c (config) is specified, LOGNAME should not be specified since it is read from the config file.  Options:  You can use either the short (i.e. /e) or long (i.e. /enable) version of the option names. Options and their values are case-insensitive.  /e:VALUE (enabled) Enable or disable a log. VALUE can be true or false.  /i:VALUE (isolation) Log isolation mode. VALUE can be system, application or custom. The isolation mode of a log determines whether a log shares a session with other logs in the same isolation class. If you specify system isolation, the target log will share at least write permissions with the System log. If you specify application isolation, the target log will share at least write permissions with the Application log. If you specify custom isolation, you must also provide a security descriptor by using the /ca (channelaccess) option.  /lfn:VALUE (logfilename) Log file name. VALUE is a full path to the file where the Event Log service stores events for this log.  /rt:VALUE (retention) Log retention mode. VALUE can be true or false. The log retention mode determines the behavior of the Event Log service when a log reaches its maximum size. If an event log reaches its maximum size and the log retention mode is true, existing events are retained and incoming events are discarded. If the log retention mode is false, incoming events overwrite the oldest events in the log.  /ab:VALUE (autobackup) Log autobackup policy. VALUE can be true or false. If VALUE is true, log will be backed up automatically when it reaches maximum size. If this value is true, the retention (specified with the /rt option) must be set to true as well.  /ms:VALUE (maxsize) Maximum size of log in bytes. Note that the minimum log size is 1048576 bytes (1024KB) and log files are always multiples of 64KB, so the value you enter will be rounded off accordingly.  /l:VALUE (level) Level filter of log. VALUE can be any valid level value. Only applicable to  logs with dedicated session. You can remove a level filter by setting VALUE to 0.  /k:VALUE (keywords) Keywords filter of log. VALUE can be any valid 64 bit keyword mask. Only  applicable to logs with a dedicated session.  /ca:VALUE (channelaccess) Access permission for an event log. VALUE is a security descriptor specified using the Security Descriptor Definition Language (SDDL). Search MSDN (http://msdn.microsoft.com) for information about SDDL format.  /c:VALUE (config) File path to config file. If specified, log properties will be read from this config file instead. Note that if you use this option, you must not specify the LOGNAME command line parameter. The log name will be read from the config file.  Example:  Set retention, autobackup and maximum log size on the Application log by using a config file. Note that the config file is an XML file with the same format as the output of wevtutil gl LOGNAME /f:xml.  C:\config.xml          true     true     9000000            wevtutil sl /c:config.xml