Our DC's are getting a little out of control on the event logging. My supervisor would like to keep all logs, forever. So I suppose that means we need a syslog server. The most recommended seems to be http:/
On a related note - here is our DC policy. I'm not sure if this is just the default or what. Any recommendations on these settings?