We are trying to set up SharePoint auditing to audit reading of list items and are having problems finding how to turn it on.
Is this supported in the Foundation version? If so how do we activate it?
There is no Auditing user interface in WSS3 or SharePoint Foundation. A (very) basic interface and reporting facility is part of MOSS 2007 and SharePoint Server 2010.
However, you can enable auditing programmatically on SharePoint Foundation. This doesn't provide any reporting facility, which you will need to write yourself.
As one of the authors behind a third party SharePoint auditing tool I have investigated this thoroughly, please take the following into account:
If you are serious about auditing then get a third party solution. As I mentioned I work for a company who provides these kind of solutions so the usual disclaimers apply.
There is a codeplex project that toggles this setting for SharePoint Foundation via a Feature. It also provides some nifty UI for viewing the Audit Log in the browser- including a useful feature to view log entries for a single item from a ECB menu option.
AuditLog for SharePoint 2010 Foundation http://auditlogsp.codeplex.com/
I know this is an old post now but I had the same requirement and I have just achieved it programmatically using PowerShell:
1) Turn on item level auditing.
2) Retrieve log entries
This script outputs the results as comma separated text so that it's ready to be copied and pasted or outputted to a CSV. Warning: The document version listed in the EventData property may not match the version history numbers visible through the SharePoint site as they change.
Modifying the scripts
These scripts will turn on auditing and retrieve logs for all items in library/list. If you need to target a particular document in a document library or a single item in a list, do so with a query on the item name instead of using foreach to loop through all the items in the list/library. E.g.
See the MSDN SPAuditEntry page for the full list of properties you can select from the audit logs.
See the MSDN SPAuditMaskType page for the full list of audit flags you can set. To set multiple flags, list them on one line separated by the bitwise or operator: '-bxor'. E.g.
You need to change the SPAudit.AuditFlags property programmatically (see the linked article for examples).