From 4ac03858429c35830df53fedb6ada26ebe7903cc Mon Sep 17 00:00:00 2001
From: fukusuket <41001169+fukusuket@users.noreply.github.com>
Date: Mon, 21 Apr 2025 07:19:36 +0900
Subject: [PATCH] chg: retain -> nooverwrite

---
 WELA.ps1 | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/WELA.ps1 b/WELA.ps1
index bdc5ef1d..fbecaf6c 100644
--- a/WELA.ps1
+++ b/WELA.ps1
@@ -1463,8 +1463,9 @@ function AuditFileSize {
         $logInfo = Get-WinEvent -ListLog $logName -ErrorAction Stop
         $maxLogSize = [math]::Floor($logInfo.MaximumSizeInBytes / 1MB)
         $recommendedSize = [int]($logNames[$logName][1] -replace " MB\+?", "")
-        $correctSetting = if ($maxLogSize -ge $recommendedSize) { "Y" } else { "N" }
         $logIsFull = $logInfo.FileSize -gt $logInfo.MaximumSizeInBytes
+        $logMode = if ($logInfo.LogMode -eq "Retain") { "NoOverwrite" } else { $logInfo.LogMode }
+        $correctSetting = if ($maxLogSize -ge $recommendedSize -and $logMode -ne "NoOverwrite") { "Y" } else { "N" }
 
         $results += [PSCustomObject]@{
             LogFile         = Split-Path $logInfo.LogFilePath -Leaf
@@ -1473,7 +1474,7 @@ function AuditFileSize {
             Default         = $logNames[$logName][0]
             Recommended     = $logNames[$logName][1]
             IsLogFull       = $logIsFull
-            LogMode         = $logInfo.LogMode
+            LogMode         = $logMode
             CorrectSetting  = $correctSetting
         }
     }