Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Error 0x00001A96 is Windows’ ERROR_LOG_RESIZE_INVALID_SIZE: an Event Log rejected the maximum size you requested. It normally means the value is below the 1,048,576-byte minimum, is not aligned to a 64-KB increment, or cannot be changed while a full log is configured to retain records. It is a configuration validation error, not a blue-screen stop code by itself. You can correct it in Event Viewer, with the elevated wevtutil command, or—if command-line access is unavailable—by editing the documented Eventlog registry value after backing up any events you need.
What does error 0x00001A96 mean?
Microsoft maps hexadecimal code 0x00001A96 to ERROR_LOG_RESIZE_INVALID_SIZE, whose message is “The requested log size is invalid.” Windows raises it when Event Log configuration validation rejects a maximum-size value. The affected log may be Application, System, Security, or a custom channel.
As an Amazon Associate I earn from qualifying purchases.
The code identifies a rejected size request, not the health of Windows as a whole. It does not, on its own, indicate malware, failing hardware, corrupted system files, or a BSOD. If the same computer is also restarting or showing a blue or black crash screen, investigate that separate stop error rather than treating 0x00001A96 as its cause.
Why does Windows reject the requested log size?
Three documented rules account for nearly every occurrence. Check each one before changing anything else.
Popular on Amazon
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
The value is below the minimum
Microsoft documents 1,048,576 bytes (1,024 KB, or 1 MB) as the minimum log size. A value such as 512 KB or 1,000,000 bytes fails validation even if it looks close to the minimum.
The value is not a 64-KB increment
Event Log files use 64-KB increments (65,536 bytes). For the standard Application, System, and Security logs, the registry MaxSize value must be a multiple of 65,536. A number that is above 1 MB but not aligned can still generate 0x00001A96. Windows may round an accepted value to an increment, but relying on that behavior makes scripts and verification harder; enter an already aligned number.
Free tools Windows power users keep installed
One-click scans. No signup required.
A full retained log must be cleared first
When retention is enabled, existing records are kept after the file reaches its maximum and new records are discarded. Microsoft states that a retained log must be cleared before its size can be changed. Export or otherwise preserve records required for troubleshooting before clearing.
How can I check which log is affected?
Identify the exact channel before resizing it. A size applied to the wrong log will not resolve the original message and can create confusion when you verify the result.
- In Event Viewer, note the log selected when the error appeared. Common choices are Windows Logs > Application, Windows Logs > System, and Windows Logs > Security.
- For a command-line inventory, open an elevated Command Prompt or PowerShell window and run
wevtutil el. This lists registered log names, including custom names that do not appear under the three standard logs. - Query the suspected channel with
wevtutil gl <LogName>. For example,wevtutil gl Applicationdisplays the Application log configuration, including its maximum size and retention-related settings. - Use the exact name returned by the list or query command. Log names are not interchangeable:
Application,System, andSecurityeach have separate settings.
How do I fix 0x00001A96 in Event Viewer?
Event Viewer is the safest interactive method for a one-time change. It applies the same minimum and alignment rules documented for the command-line interface.
- Press the Windows key, type Event Viewer, and open it with an administrator account.
- Expand Windows Logs in the left pane, then select Application, System, or Security. For another channel, open the relevant node under Applications and Services Logs.
- Right-click the affected log and choose Properties. Windows 10 and Windows 11 can use slightly different wording or placement, but the log Properties dialog contains the maximum-size field.
- Enter a value of at least 1,048,576 bytes that is an exact multiple of 65,536 bytes. Valid examples include
1,048,576(1 MB),2,097,152(2 MB), and16,777,216(16 MB). - If the dialog indicates that records are retained and the log is full, export or back up events needed for diagnostics. Clear the log, then return to Properties and enter the new maximum.
- Apply the change, close the dialog, reopen Properties, and confirm that the displayed maximum is the value you intended. Windows can display a rounded value because files are stored in 64-KB increments.
Choose a size appropriate to the workload rather than automatically selecting the largest possible file. A busy server, development machine, or gaming PC that records many application events may need more room than a lightly used system, but the documented validity rules remain the same.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Also popular on Amazon
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
How do I resize a log with wevtutil?
wevtutil is useful for repeatable administration and scripts. The gl (get-log) operation reads configuration, while sl (set-log) changes it; the /ms parameter is expressed in bytes.
Set the Application log to 1 MB
wevtutil gl Application
wevtutil sl Application /ms:1048576
wevtutil gl ApplicationThe first query records the starting state, the second requests a 1-MB maximum, and the final query verifies the result. Run the commands in an elevated Command Prompt or PowerShell session. Without elevation, Windows may deny the operation even when the number is valid.
Use another standard log
wevtutil sl System /ms:2097152
wevtutil gl System
wevtutil sl Security /ms:16777216
wevtutil gl SecurityReplace the channel name and byte count with the values you actually need. The examples set System to 2 MB and Security to 16 MB; they are valid because both numbers are 64-KB multiples and exceed 1 MB.
Set a custom channel
Use the exact custom name shown by wevtutil el or wevtutil gl:
wevtutil gl <LogName>
wevtutil sl <LogName> /ms:16777216
wevtutil gl <LogName>Keep quotation marks around a name if the command interpreter requires them. If the query itself fails, stop and correct the channel name rather than repeatedly changing the size.
Which byte values are valid?
Use the formula 65,536 × n, where the result is at least 1,048,576. The table gives practical choices; it is not a recommendation to make every log the same size.
Also popular on Amazon
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
| Maximum size | Bytes to enter | Typical use |
|---|---|---|
| 1 MB | 1,048,576 | Minimum accepted size and the documented default for standard logs |
| 2 MB | 2,097,152 | Small increase for a lightly used channel |
| 4 MB | 4,194,304 | Moderate event volume |
| 8 MB | 8,388,608 | Higher-volume application or system logging |
| 16 MB | 16,777,216 | Large buffer when retaining more history is useful |
Values such as 1,500,000 bytes are not aligned to 65,536 and should be avoided. A value below 1,048,576 is unsupported regardless of alignment.
What should I do when retention is enabled?
Retention changes the order of operations. If the log is full and configured to retain records, resize attempts can be rejected until the existing file is cleared.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →- Open the log’s Properties and inspect the retention setting and current status.
- Export or back up events that may be needed for support, compliance, or troubleshooting. Event Viewer provides an export option from the log’s context menu; choose a location you can access after the log is cleared.
- Clear the log only after verifying that the saved file opens and contains the required records.
- Set the new maximum in Properties or with
wevtutil sl. - Run
wevtutil gl <LogName>or reopen Properties to verify the effective size.
Clearing a log removes its entries; it is not the same as changing the maximum. Do not clear Security or another audit-sensitive log without following your organization’s retention and evidence rules.
Can I use the registry if Event Viewer and wevtutil are unavailable?
The registry is a documented fallback, not the preferred first step. Use it only when the graphical and command-line methods cannot be used, and make a backup before editing.
Registry location and value
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventlog<LogName>Under the key for the affected channel, MaxSize is a DWORD containing the maximum size in bytes. For the standard logs, set it to a 64-KB multiple no lower than 1,048,576. The same key’s Retention value controls whether old events are overwritten or retained.
Safe editing sequence
- Sign in with an administrator account and create a backup of the relevant registry key using Registry Editor’s export command.
- Navigate to the Eventlog path and select the subkey matching the exact log name.
- Open
MaxSize, choose the appropriate numeric representation, and enter a valid byte value such as1048576or16777216. - Do not alter
Retentionmerely to bypass an error. If retention is enabled and the file is full, preserve and clear the log through Event Viewer first. - Close Registry Editor, then verify the effective configuration with
wevtutil gl <LogName>or the log’s Properties dialog.
A registry value can be overwritten by administrative policy or another management tool. Verification through Event Viewer or wevtutil is therefore required even when the DWORD appears correct.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Also popular on Amazon
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Which fix method should I choose?
All three methods change the same maximum-size setting, but they fit different situations.
| Method | Best use | Key rule | Verification |
|---|---|---|---|
| Event Viewer Properties | One-off interactive change | At least 1 MB and a 64-KB increment | Reopen Properties |
wevtutil sl |
Repeatable administration or scripts | /ms is bytes; use an aligned value |
wevtutil gl |
| Eventlog registry key | Recovery or policy work when the other interfaces are unavailable | MaxSize DWORD must be a 64-KB multiple for standard logs |
wevtutil gl or Event Viewer |
What if the error returns after I set a valid size?
A recurring message usually points to the target log, its state, or permissions rather than a different numeric formula. Work through these checks in order.
Confirm the target
Run wevtutil el, then query the exact channel with wevtutil gl <LogName>. A script aimed at Application will not change a similarly named custom channel.
Check retention and fullness
If the log retains records and has reached its maximum, export the required events, clear the log, and retry. Changing the number before clearing cannot bypass that documented condition.
Check elevation
Close the current console and open Command Prompt or PowerShell with Run as administrator. Event Viewer also needs an account permitted to modify the selected log, especially Security.
Verify the effective value
Query the log after every change. If the reported value differs from what you entered, Windows rounded it to a 64-KB increment or another management setting replaced it. Use the value returned by the query as the source of truth.
Also popular on Amazon
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Separate configuration errors from crashes
If the machine is also restarting, freezing, or showing a blue or black screen, collect the stop code and investigate it independently. Microsoft’s stop-error guidance includes checking current Windows updates, BIOS or firmware, hardware and memory tests, available disk space, and the responsible vendor’s drivers or software when indicated. The presence of 0x00001A96 does not identify which of those areas is at fault.
How can I prevent future invalid-size errors?
Standardize the values used by people and scripts that manage logs. Record the channel name, desired byte count, retention policy, and verification command together so a later change does not silently target a different log.
Recommended Free Tools
- Use a written list of approved byte values based on 65,536-byte increments.
- Keep the minimum rule visible in automation: reject values below 1,048,576 before calling
wevtutil sl. - Query with
wevtutil glafter changes and log the returned configuration. - Schedule exports or follow your organization’s retention process before clearing an audit-sensitive channel.
- When troubleshooting an application, identify whether the problem is excessive event volume or an invalid size request; increasing the maximum does not correct a faulty event source.
Is 0x00001A96 a Windows 10-only or Windows 11-only problem?
No version-specific defect is established by the documented information. Microsoft’s wevtutil reference applies to both Windows 10 and Windows 11, and the minimum-size and 64-KB rules are the same. Interface labels can vary slightly between releases, but the underlying configuration requirements do not.
Edition, organization policy, and the particular log can affect which account may change a setting. Treat the error as a value-and-state validation failure unless separate evidence points to another problem.
If you prefer an optional shortcut after trying the manual steps, Outbyte PC Repair can address certain common Windows issues and includes an app-crash log; it complements antivirus software rather than replacing it. It offers a category-based free trial for at least two days on Windows 11, 10, 8, and 7, then requires a subscription, and results vary—no tool repairs every crash.
Frequently Asked Questions
Does error 0x00001A96 delete my existing Event Log entries?
No. The code reports that Windows rejected a size request. Existing entries remain unless you explicitly clear the log, although a retained, full log may discard new entries until space is made available.
How do I save events before clearing a full log?
In Event Viewer, open the affected channel’s context menu and use its export or save option to create an event-log file. Open the saved file to confirm it contains the records you need before clearing the original.
Why does the size I enter appear slightly different afterward?
Event Log files are stored in 64-KB increments, so Windows can round an accepted byte value to the nearest supported increment. Querying with wevtutil gl <LogName> shows the effective configuration.
Can changing the log size stop a blue-screen restart?
Not by itself. 0x00001A96 concerns Event Log configuration; a restart or stop screen requires a separate investigation using the displayed stop code and checks such as updates, firmware, memory, disk space, and relevant drivers.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors
