Event Message:

Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. Number of audit messages discarded: number

Source Event Log Event ID Event Type
Security Security 516 Success Audit

Explanation:

This event record indicates that audit event records have been discarded, due to overwriting of earlier records or due to cessation of auditing, depending on the audit policy you have established; or by internal event queues exceeding their maximum length.