Chat now with support
Chat with Support

Change Auditor for SharePoint 7.2 - User Guide

Make changes and run a report

1
To test SharePoint auditing, make some changes to the SharePoint farm specified in the template.
For example:
•
add a document
•
add a folder
•
add an announcement
•
add a task
•
delete the document added above
•
delete the task added above
2
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client to review the events generated.
3
Open the Searches tab.
4
Expand the Shared | Built-in | SharePoint folder in the left pane.
5
Locate and double-click All SharePoint Events in the last 7 days in the right-hand pane.
A new Search Results tab is added to the client displaying the SharePoint events that were captured.
6
Double-click an event from the Search Results grid to display the event details for the selected event.

Troubleshooting steps

If the SharePoint events do not appear as expected, check the following:

•
Review the SharePointPluginCA.Log.nptlog for any errors and to verify that the SharePoint plug-in process is running.
•
Verify that a SharePoint Web Front End server is assigned to audit the farm.
•
If you are not getting some events (e.g., restore events, permission events, etc.) from a specific site, verify that system provided auditing is enabled for that SharePoint site. See System provided auditing.
•
If you are not getting versioning events, verify that versioning is enabled for that type of object in SharePoint. See Versioning.
•
Verify that the user account being used to access the SharePoint farm has the following permissions:
•
Local Administrator on the Change Auditor Agent\SharePoint Central Administration server
•
SharePoint Farm Administrator
•
The following mappings on the SQL Server that contains the SharePoint databases:
•
SharePoint_Config
•
SharePoint_Shell_Access
•
SPDataAccess
•
WSS_Content
•
SPDataAccess
•
SharePoint_AdminContent
•
SPDataAccess
•
If you get an access denied error when attempting to add a personal site to the SharePoint Auditing wizard, verify that the account being used by the selected agent has been added to the User Web Policy for the site. See MySite Site Collection.
•
Verify that you have included the correct SharePoint paths for auditing. (Paths listed across the middle of the first page of the SharePoint Auditing wizard.)
•
Verify that you have not excluded the specified paths from auditing. (Paths listed at the bottom of the first page of the SharePoint Auditing wizard.)
•
Verify that you have selected those types of events in the SharePoint auditing template. (Facilities and/or event classes specified in the SharePoint Auditing wizard.)
•
Verify that the events selected for auditing are enabled. (Use the Audit Events page on the Administration Tasks tab.)
•
Verify that the Change Auditor SharePoint Solution has been successfully deployed. See Verify deployment status of Change Auditor SharePoint Solution.
•
Refresh the specified agent configuration on the Agent Configuration page to ensure the latest SharePoint auditing template is being used. See Verify auditing template is applied.

SharePoint Auditing

•
Introduction
•
SharePoint Auditing page
•
SharePoint Auditing templatesSharePoint Auditing wizard
•
SharePoint event logging

Introduction

The SharePoint Auditing page on the Administration Tasks tab displays details about each SharePoint auditing template created and allows you to add new auditing templates or modify and delete templates.

* 
NOTE: Each SharePoint farm to be audited requires its own SharePoint Auditing template.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating