JSI Tip 9263. When you use Event Viewer to check the abbreviated file size on the Properties page of an event log, the size may be incorrect?

When you open Event Viewer (EventVwr.msc) to view the Properties of an event log, the abbreviated file size may be incorrect.

If, for example, you using Windows Explorer to view the properties of the Application log, %SystemRoot%SYSTEM32CONFIGAppEvent.Evt, the size actual size may be 29.3 megabytes (MB), but when viewed from Event Viewer, it may be 29.0 megabytes.

This behavior occurs in Windows 2000, Windows XP, and Windows Server 2003, because the algorithm that the Event Viewer uses to calculate the file size is incorrect.