• 成为门户专家
• 下载
• 打印
• 我的下载 ()

• 支持
• 技术说明文件
• Change Auditor for SharePoint 7.2
• Change Auditor for SharePoint 7.2 - Event Reference Guide

Change Auditor for SharePoint 7.2 - Event Reference Guide

内容导航  

Introduction Change Auditor for SharePoint Events

SharePoint Document SharePoint Document Library SharePoint Farm SharePoint Folder SharePoint List SharePoint List Item SharePoint Permission SharePoint Security Group SharePoint Site SharePoint Site Collection

Log Events SharePoint Event Requirements

• Viewing Topics 1 - 4 of 14

×

Introduction

Change Auditor for SharePoint provides centralized auditing, including configuration, event collection and reporting, for Microsoft SharePoint 2013, 2016, and 2019 servers and farms. It audits all activity related to:

•	Documents - including check-ins/check-outs, additions, deletions, access (viewed), content or metadata updates, renames, moves, and restores.

•	Folders - including additions, deletions, moves, renames, restores, and updates.

•	Document Libraries and Lists - including additions, deletions, renames, and restores.

•	List Items - including additions, deletions, updates, and restores.

•	Permissions and Security Groups - including changes to permission levels, permission inheritances, and security groups.

•	Sites and Site Collections - including creations, deletions, and moves.

In addition to real-time event auditing, you can also enable SharePoint event logging to capture SharePoint events locally in a Windows event log. This event log can then be collected using Quest InTrust to satisfy long-term storage requirements.

NOTE: SharePoint auditing and event logging are only available when you have licensed Change Auditor for SharePoint and have applied a SharePoint Auditing template that defines the SharePoint farm and paths to audit. Contact your Sales Representative for more information on obtaining Change Auditor for SharePoint.

Change Auditor for SharePoint also tracks, audits, reports, and alerts on changes to Microsoft SharePoint Online and OneDrive for Business that impact your environment. For information on the audited events, see the Office 365 and Azure Active Directory Event Reference Guide.

This guide lists the events that can be captured by Change Auditor for SharePoint. Separate event reference guides are provided that list the core Change Auditor events (when any Change Auditor license is applied) and the events captured when the different auditing modules are licensed.

Change Auditor for SharePoint Events

Change Auditor for SharePoint tracks, audits, reports, and alerts on changes to SharePoint Server 2013, 2016, and 2019 configuration and permissions changes as well as document stores and lists.

NOTE: For Change Auditor to capture some SharePoint events, you must enable system provided auditing and/or versioning within SharePoint. See SharePoint Event Requirements for a list of the events that require these SharePoint settings to be enabled.

This section lists the audited events captured by Change Auditor for SharePoint. They are listed in alphabetical order by facility:

•	SharePoint Document Library

•	SharePoint Farm

•	SharePoint Folder

•	SharePoint List

•	SharePoint List Item

•	SharePoint Permission

•	SharePoint Security Group

•	SharePoint Site

•	SharePoint Site Collection

SharePoint Document

IMPORTANT: When expecting large numbers of events, it may be necessary to increase the Max Events per Connection setting in the client (Agent Configuration on the Administration Tasks tab) to avoid an ever-increasing backlog of events waiting to be sent from the agent to the coordinator database.

NOTE: To view a complete list of all the events, open the Audit Events page on the Administration Tasks tab. This page contains a list of all the events available for auditing. It also displays the facility to which the event belongs, the severity assigned to each event, if the event is enabled or disabled, and the type of license that is required to capture each event.

 

 

Table 1. SharePoint Document events

Event	Description	Severity
All document versions deleted	Created when all versions of a document are deleted from the SharePoint platform.	Medium
Document added	Created when a document is added to the SharePoint platform.	Medium
Document check out canceled	Created when a document check out is canceled.	Medium
Document checked in	Created when a previously checked out document is checked back in.	Medium
Document checked out	Created when a document is checked out for editing.	Medium
Document deleted	Created when a document is deleted from the SharePoint platform.	Medium
Document metadata updated	Created when the metadata defined for a document is updated. (Disabled by default.)	Medium
Document moved	Created when a document is moved to a different location within the SharePoint platform. NOTE: ‘Move’ and ‘Rename’ events are only captured when using the ‘Open with Explorer’ ribbon feature within the Document Library (Library tab).	Medium
Document renamed	Created when a document is renamed. NOTE: ‘Move’ and ‘Rename’ events are only captured when using the ‘Open with Explorer’ ribbon feature within the Document Library (Library tab).	Medium
Document restored from recycle bin	Created when a previously deleted document is restored from the recycle bin.	Medium
Document updated	Created when the contents of a document is updated.	Medium
Document version deleted	Created when a version of a document is deleted from the SharePoint platform.	Medium
Document viewed	Created when a document stored in SharePoint is viewed. NOTE: For performance reasons SharePoint 2019 does not support auditing document viewed events. Because of this, Change Auditor does not capture this event for SharePoint 2019.	Medium

SharePoint Document Library

 

Table 2. SharePoint Document Library events

Event	Description	Severity
Document library added	Created when a document library is added to the SharePoint® platform.	Medium
Document library deleted (empty)	Created when a document library that is empty is deleted from the SharePoint platform.	Medium
Document library deleted (with contents)	Created when a document library and all of its contents are deleted from the SharePoint platform.	Medium
Document library renamed	Created when a document library is renamed. NOTE: ‘Move’ and ‘Rename’ events are only captured when using the ‘Open with Explorer’ ribbon feature within the Document Library (Library tab).	Medium
Document library restored from recycle bin	Created when a previously deleted document library is restored from the recycle bin.	Medium

•  上一页
• Viewing Topics 1 - 4 of 14
• 下一页 

搜索该文档 在所有文档中搜索该产品版本 在所有文档中搜索该产品 搜索所有文档

自助服务工具

知识库

通知和警报

产品支持

下载软件

技术说明文件

用户论坛

视频教程

RSS订阅源

联系我们

获得许可 帮助

技术支持

查看全部

×

 欢迎访问支持

您可以在附属支持站点上查找适用于戴尔*产品*的在线支持帮助。单击“继续”，转至适用于*产品*的正确支持内容和帮助。

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center