Change Auditor for SharePoint 7.1.1 - Event Reference Guide

Introduction Change Auditor for SharePoint Events

SharePoint Document SharePoint Document Library SharePoint Farm SharePoint Folder SharePoint List SharePoint List Item SharePoint Permission SharePoint Security Group SharePoint Site SharePoint Site Collection

Log Events SharePoint Event Requirements

Log Events

When event logging for SharePoint is enabled in Change Auditor, SharePoint events will also be written to a Windows event log, named ChangeAuditor for SharePoint. This event log can then be gathered by InTrust and Quest Knowledge Portal for further processing and reporting.


	NOTE: To enable event logging, select Event Logging on the Agent Configuration page (Administration Tasks tab), and select the type of event logging to be enabled.

ChangeAuditor for SharePoint event log

The following table lists the SharePoint events that are recorded to the ChangeAuditor for SharePoint event log when SharePoint event logging is enabled . They are listed in numeric order by event ID.

Table 11. ChangeAuditor for SharePoint event log events
Event ID	Description
30	Security group created
31	Security group deleted
32	Member added to security group
33	Member removed from security group
34	Permission level created
35	Permission level deleted
36	Permission level permissions modified
37	Permission level inheritance broken
39	Permission inheritance restored
40	Permission inheritance broken
50	Permission level granted
51	Permission level revoked
52	All permission levels revoked
53	Site collection ownership granted
54	Site collection ownership revoked
200	Document added
201	Document contents updated
202	Document deleted
203	Document checked out
204	Document checked in
205	Document check out canceled
206	Document metadata updated
208	Document moved
210	Document viewed
211	Document renamed
213	Document version deleted
214	All document versions deleted
216	Document restored from the recycle bin
250	List item added
251	List item updated
252	List item deleted
256	List item attachment added
257	List item attachment deleted
258	List item version deleted
259	All list item versions deleted
261	List item restored from recycle bin
270	Folder added
271	Folder deleted
272	Folder updated
273	Folder renamed
274	Folder moved
275	Folder restored from recycle bin
300	Site created
301	Site deleted
302	Site moved
303	Site collection created
304	Site collection deleted
400	Document library deleted (with contents)
401	Document library deleted (empty)
402	Document library renamed
403	Document library added
404	Document library restored from recycle bin
450	List deleted (with contents)
451	List deleted (empty)
452	List renamed
453	List added
454	List restored from recycle bin
500	Auditing solution deployment changed

SharePoint Event Requirements

The following table lists the SharePoint events that require extra SharePoint settings to be enabled in order for Change Auditor to capture the event.

See the Change Auditor for SharePoint User Guide for instructions on how to enable system provided auditing and versioning within SharePoint.

Table 12. SharePoint event requirements
Event	System Provided Auditing	Versioning
All document versions deleted	X	X
All list item versions deleted	X	X
All permission levels revoked	X
Document library restored from recycle bin	X
Document restored from recycle bin	X
Document version deleted	X	X
Document viewed	X
Folder restored from recycle bin	X
List item restored from recycle bin	X
List item version deleted	X	X
List restored from recycle bin	X
Member added to security group	X
Member removed from security group	X
Permission inheritance broken	X
Permission inheritance restored	X
Permission level created	X
Permission level deleted	X
Permission level granted	X
Permission level inheritance broken	X
Permission level permissions modified	X
Permission level revoked	X
Security group created	X
Security group deleted	X
Site collection ownership granted	X
Site collection ownership revoked	X

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Change Auditor for SharePoint 7.1.1 - Event Reference Guide

Log Events

SharePoint Event Requirements