Chat now with support
Chat with Support

Change Auditor for SharePoint 7.4 - Event Reference Guide

Log Events

When event logging for SharePoint is enabled in Change Auditor, SharePoint events will also be written to a Windows event log, named ChangeAuditor for SharePoint. This event log can then be gathered by InTrust for further processing and reporting.

 
* 
NOTE: To enable event logging, select Event Logging on the Agent Configuration page (Administration Tasks tab), and select the type of event logging to be enabled.
ChangeAuditor for SharePoint event log

The following table lists the SharePoint events that are recorded to the ChangeAuditor for SharePoint event log when SharePoint event logging is enabled . They are listed in numeric order by event ID.

 
Table 11. ChangeAuditor for SharePoint event log events
Event ID
Description

30

Security group created

31

Security group deleted

32

Member added to security group

33

Member removed from security group

34

Permission level created

35

Permission level deleted

36

Permission level permissions modified

37

Permission level inheritance broken

39

Permission inheritance restored

40

Permission inheritance broken

50

Permission level granted

51

Permission level revoked

52

All permission levels revoked

53

Site collection ownership granted

54

Site collection ownership revoked

200

Document added

201

Document contents updated

202

Document deleted

203

Document checked out

204

Document checked in

205

Document check out canceled

206

Document metadata updated

208

Document moved

210

Document viewed

211

Document renamed

213

Document version deleted

214

All document versions deleted

216

Document restored from the recycle bin

250

List item added

251

List item updated

252

List item deleted

256

List item attachment added

257

List item attachment deleted

258

List item version deleted

259

All list item versions deleted

261

List item restored from recycle bin

270

Folder added

271

Folder deleted

272

Folder updated

273

Folder renamed

274

Folder moved

275

Folder restored from recycle bin

300

Site created

301

Site deleted

302

Site moved

303

Site collection created

304

Site collection deleted

400

Document library deleted (with contents)

401

Document library deleted (empty)

402

Document library renamed

403

Document library added

404

Document library restored from recycle bin

450

List deleted (with contents)

451

List deleted (empty)

452

List renamed

453

List added

454

List restored from recycle bin

500

Auditing solution deployment changed

SharePoint Event Requirements

The following table lists the SharePoint events that require extra SharePoint settings to be enabled in order for Change Auditor to capture the event.

See the Change Auditor for SharePoint User Guide for instructions on how to enable system provided auditing and versioning within SharePoint.

 
Table 12. SharePoint event requirements
Event
System Provided Auditing
Versioning

All document versions deleted

X

X

All list item versions deleted

X

X

All permission levels revoked

X

 

Document library restored from recycle bin

X

 

Document restored from recycle bin

X

 

Document version deleted

X

X

Document viewed

X

 

Folder restored from recycle bin

X

 

List item restored from recycle bin

X

 

List item version deleted

X

X

List restored from recycle bin

X

 

Member added to security group

X

 

Member removed from security group

X

 

Permission inheritance broken

X

 

Permission inheritance restored

X

 

Permission level created

X

 

Permission level deleted

X

 

Permission level granted

X

 

Permission level inheritance broken

X

 

Permission level permissions modified

X

 

Permission level revoked

X

 

Security group created

X

 

Security group deleted

X

 

Site collection ownership granted

X

 

Site collection ownership revoked

X

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating