Configure forwarder resource usage: registry value MaxForwardingRateComputerHKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding

Policy ID: ForwarderResourceUsage
Scope: Computer Configuration
Supported on: At least Windows Vista
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › Event Forwarding

Registry

MaxForwardingRate

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding Current key

Enabled value: Depends on the option value
Element: The maximum forwarding rate ( events/sec ) allowed for the forwarder:
Value type: REG_DWORD

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EventLog\EventForwarding]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"MaxForwardingRate"=dword:<enter value>

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding" /v "MaxForwardingRate" /t REG_DWORD /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\EventLog\EventForwarding' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\EventLog\EventForwarding' -Name 'MaxForwardingRate' -PropertyType DWord -Value '<enter value>' -Force | Out-Null