"Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits. Number of audit messages discarded: %1"
Event 516 indicates that an extremely high period of activity prevented Windows from logging %1 number of security events.