Chat now with support
Chat with Support

Change Auditor for SharePoint 7.2 - User Guide

Enable SharePoint settings

To capture some of the SharePoint events, you must enable:

NOTE:  
See SharePoint Event Requirements for a list of the events that need these additional settings enabled.

For all SharePoint web applications (including each user site under MySite) to be audited, system provided auditing must be enabled.

2
Under the Site Collection Administration heading, click Site collection audit settings.
3
Under the Documents and Items section, select all the check boxes.
4
Under the Lists, Libraries, and Sites section, select the Editing users and permissions check box.

To audit versioning within SharePoint, enable it for each individual Library and List Item pertaining to the Sites being audited.

2
Under Library Tools, select the Library tab.
3
Click the Library Settings icon, located to the right of the ribbon.
4
Click Versions settings under General Settings.
5
In the Document Version History section, change the selection of No Versioning to the desired level of versioning: Create major versions or Create major and minor (draft) version.

For proper auditing of sites within the MySite Site Collection or Web Application, the account Change Auditor uses to access the SharePoint database must be added as a Site Collection Administrator (primary or secondary) or to the User Web Policy for the MySite host.

Depending on how your MySite host is initially set up, use the Central Administration Web Site to verify, and if necessary add, this account.

This refers to the default ‘MySite’ Site Collection that is automatically created during a SharePoint Single Server installation. Its location is under the default SharePoint-80 Web Application (//veneno in the following screen shot). By default, the SharePoint farm account is assigned as the Primary Site Collection Administrator. However, if this site collection is manually created, then the primary and secondary administrator can be specified.

In this scenario, verify that the account Change Auditor is using is listed as either the Primary Site Collection Administrator or Secondary Site Collection Administrator for the MySite Site Collection.

This refers to the ‘MySite’ Web Application that is created manually after a SharePoint Multi-Server Farm installation. In this case, MySite is not tied to any other web application (i.e., is not underneath the default SharePoint Web Application) and therefore uses the User Policy permissions.

In this scenario, verify that the account Change Auditor is using is included in the User Web Policy for the MySite Web Application.

Add and deploy Change Auditor SharePoint Solution

To capture SharePoint events, add the Change Auditor SharePoint Solution (SharePoint.Auditing.Monitor.wsp) to the SharePoint Solution Store (which can be found on the Solution Manager page in the Central Administration site) and deploy it all SharePoint web applications of the SharePoint farms to audit.

Change Auditor provides the SharePoint Solution Manager utility to add the solution to the SharePoint Solution Store and deploy it globally to all SharePoint web applications. The Change Auditor SharePoint Solution must be deployed to all SharePoint web applications on all SharePoint farms that you want to audit.

NOTE:  
SharePoint 2013: SharePointSolutionManagerCALauncher2013.exe
SharePoint 2016: SharePointSolutionManagerCALauncher2016.exe
SharePoint 2019: SharePointSolutionManagerCALauncher2019.exe
Click Run.

Once the issue is resolved, rerun the SharePoint Solution Manager utility to deploy the Change Auditor SharePoint Solution.

Click Close to close the SharePoint Solution Manager dialog.

Create SharePoint Auditing template

Create a SharePoint Auditing template which specifies the SharePoint farm and the paths within the SharePoint farm to audit and the agent to receive events from the selected SharePoint farm.

Client components and features

The following table lists the client components and features that require a valid Change Auditor for SharePoint license. The product will not prevent you from using these features; however, associated events will not be captured unless the proper license is applied.

NOTE: To hide unlicensed Change Auditor features from the Administration Tasks tab (including unavailable audit events throughout the client), use the Action | Hide Unlicensed Components menu command. Note that this command is only available when the Administration Tasks tab is the active page.

 

Administration Tasks tab

Agent Configuration page

Audit Task list:

NOTE: See SharePoint Auditing for information about enabling event logging and creating templates to define SharePoint auditing.

Event Details pane

What details:

Events

Facilities:

Search Properties

What tab:

NOTE: See SharePoint Searches and Reports for information on using the What tab to create custom SharePoint search queries.

Searches page

Built-in reports:

Advanced tab/Search Results page

Columns:

Alert Body Configuration dialog - Event Details tab

Variables (email tags):

NOTE: See the Change Auditor User Guide for a description of these email tags and how to configure alert email notifications.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating