Administrators can use the audit feature of Microsoft SharePoint Server to track which users have taken what actions on the sites, content types, lists, libraries, list items, and library files of site collections.

learn more… | top users | synonyms

0
votes
0answers
11 views

How to set site audit report document library location via CSOM

I am configuring site auditing via CSOM. Most of this is easily done via code. The one piece I cannot figure out, is how to set the document library where the audit reports are stored before ...
1
vote
1answer
18 views

SPAuditEntry MachineName and MachineIP properties

I am using the SharePoint Audit Query to build a custom audit log system. For each hit, I need also the machine name or machine IP. On the object SPAuditEntry there are two MachineName and MachineIP ...
1
vote
2answers
17 views

Audit Report With User IDs as Numbers

I recently turned on auditing for a specific list. After producing a custom report to check usage data, we noticed the report contains several 3 and four digit numbers in the user ID column instead ...
0
votes
1answer
12 views

Determine what user was deleted from a security group in the audit logs

I have configured the site collection audit settings to monitor permission changes. In the Audit log reports->Security settings I get an excel report with Security Group Member Delete events. The ...
1
vote
2answers
36 views

Tracking all changes made to a document on SharePoint 2010 within a web-part

I am building a site in SharePoint 2010 and I would like to have a webpart that will track and log who and when updates are being made to a specific document. The webpart will be featured on the ...
0
votes
2answers
22 views

Avoid Audit disabling

How can I log when the audit is enabled or disabled at site collection scope? I need to track when someone disable the audit log. SP2013 on premise.
0
votes
1answer
40 views

Audit logging on users and roles in office 365 Admin console

I would like to know the way on how to extract the logs for user addition/deletion changes and role based changes in office 365. I am the global admin to my tenant but one of the global admin has ...
0
votes
1answer
17 views

Auditing for single site and a single list

I have been tasked to report on the number of site visitors and opening of items in single calendar list. having already discovered that I should enable auditing for the list in question I went ahead ...
2
votes
3answers
89 views

How do I track what users are opening and downloading in SharePoint 2013 Online?

Given that the "Opened and downloaded documents, viewed items in lists, or viewed item properties" audit event is unavailable in SP2013 Online, what other options are there for tracking who is opening ...
0
votes
0answers
44 views

Is there a free permissions auditing solution for Sharepoint 2013?

I need a way to audit permissions on my organization’s Sharepoint 2013 intranet. There’s one AD security group that’s allowed to have full control permissions to anything in our Sharepoint. Every ...
1
vote
3answers
57 views

Document Library level auditing in SP 2013

I want to enable auditing on one of the document library for "Change" event. My question is, Is it mandatory to enable "Editing Items" from site collection settings for audits to be generated or ...
0
votes
1answer
39 views

Find out who added a column to my SharePoint 2013 library

We're trying to find out who added a specific column to our library. I can see some info about the fields via the REST API, but not exactly what I wanted at the level of who created the column: ...
0
votes
2answers
25 views

How to find out missing or deleted site collections in Staging Environment

We have created some 40+ site collections in staging environment.On the dev machines we used to development and deploy the wsps and run the powershell scripts in UAT to create site collections and ...
0
votes
0answers
23 views

Audit Logs for Documents, Hits Not Registered On View

SharePoint 2013 Standard. View logs are not always registered in the AuditData table for document files. Auditing at a site-level and item-level both enabled. If I open a PDF file in a browser, and ...
0
votes
0answers
23 views

User(s) with only read permissions have update event in audit log

I have a SharePoint online site that I am running a custom audit log on. As I was looking over the log, I noticed that some users are listed with update events on documents that they only have ...
1
vote
0answers
53 views

How to find changed content types in audit logs

I have auditing enabled and have generated the content type modification log in excel format. I need to figure out how to find a specific content type that was modified. Any pointers?
1
vote
1answer
141 views

Audit List field level changes - SharePoint

Is it possible to audit changes on List fields in SharePoint 2013? What I'm looking for is to get some report when certain fields in a List is changed by users, not looking for values but just a ...
1
vote
2answers
31 views

Logging history for Sharepoint 2010 Foundation

Is there any way to get a record of who entered the portal with the date and time?
1
vote
1answer
19 views

Monitor download files in sharepoint 2010 foundation

I need to monitor the download files, I have this tool https://auditlogsp.codeplex.com/ but it does not have the option to monitor downloads, only when I view the properties of a document
0
votes
0answers
25 views

Audit report from custom report sharepoint

I want to create a webpart in which I have 2 date fiels (start date and end date) , a button (submit) and a grid view. I want to fetch the report from "Audit log report" , run a custom report and ...
0
votes
1answer
89 views

Using SharePoint WSS_Content database to find permissions changes?

I've noticed there are a few tables that may be able to help me put together an "Audit Log" of sorts for permissions changes in our SharePoint site. However, I'm unsure of how to join up the tables ...
1
vote
1answer
34 views

SP13: Number of People Accessing Document

I will like to find out how many people are viewing my document within a document library. I thought I could see it by choosing the ellipse per document and the number will appear in the dialog box ...
1
vote
1answer
31 views

Blocking Farm account from retrieving audit for specific site collection [For QA tests]

I would like to know if there is a "trick" to block the capacity of FARM account user to retrieve audit from specific site collection while that FARM account user is able to retrieve audit from other ...
2
votes
0answers
57 views

Read audit log and display in webpart

I want to display audit report in webpart. Webpart will have a button "get_audit" and dropdown which have months (Jan-Dec). when user select month say Jan and click on button it would display the data ...
1
vote
1answer
43 views

What is proper way to dispose after getting audit entries?

I'm cleaning up our audit logs exporting to a local disk for archiving. The logs are so big I can only export about a half a month at a time. The script I wrote works fine, but I'd like to automate ...
0
votes
1answer
83 views

Create Audit Log Script w/ Custom Dates

The following PowerShell script pulls all the content from a specified SharePoint site and creates an audit log for all versions and dates. My Question is how would I implement a Start/End date? For ...
2
votes
2answers
707 views

How to archive the AuditData table on a contentDB?

I have a content db whose audit log is getting really big (60GB) and it's starting to effect the DB. I know I can go in and delete entries via Powershell, but I wanted to archive this table before I ...
1
vote
0answers
43 views

Audit Log not working until check-out/-in (SharePoint 2010)

We have one very strange problem with audit logs on document library. When a user with Contribute permission creates a document audit log does not start loging the new document until SiteCollection ...
1
vote
1answer
41 views

Removed groups in subsite sharepoint2013?

Some one removed the groups in a subsite, again i added the groups, is it possible t know who removed the groups in sharepoint 2013?
3
votes
2answers
1k views

How can I see what documents have been deleted from a Document Library?

I have a document library that had files in it yesterday. Today it does not. When trying to view some sort of an audit log I realized I didn't know how to. I'm using SharePoint 2013 Online. How can I ...
1
vote
2answers
28 views

Is SharePoint Auditing something separately licensed?

I am trying to get a solution for an internal company request. We have a set of reports that are used throughout the company, and we want to track who/when(maybe where) downloaded one of these Excel ...
1
vote
1answer
514 views

Retaining workflow history for auditing purposes

I am in the process of upgrading our SharePoint environment from 2010 to 2013. As you may know SharePoint only keeps workflow associations around for a period of 60 days, after which they're deleted. ...
0
votes
2answers
49 views

Add many entries to SPAudit

I want to create multiple entries of SPAudit for test it before use it in real environment. I supposed that I just can open a web many times and generate as many entries as I want. So i wrote this: ...
0
votes
2answers
96 views

How to change SPAudit entries?

For example, I want to get all audit entries and increase EventDate on one hour, and after save changes. So generaly I want to be able to change SPAuditEntry properties and after update all changes in ...
0
votes
1answer
180 views

Accidentally removed all permissions from a site, any way to recover them?

Short of a full restore from backup I mean. Apparently we don't have a current one. This site has a ton of broken permissions and we don't have a master list of them, so it's going to be difficult to ...
2
votes
1answer
348 views

Need site inventory tool for SharePoint 2007 that doesn't require server access

We're migrating from 2007 to 2010 and I need a full inventory (site, libraries, lists) so I can remove stuff that's no longer being used. However, everything I've found so far requires server access. ...
1
vote
1answer
2k views

SharePoint Foundation 2013 - Audit log

Can I read from audit log, how many times item has been clicked? I know that I can do it using Server edition, but what about Foundation? What I have done: Central Administration, I enabled Secure ...
2
votes
2answers
123 views

Confusing Audit Tables

I am having a hard time with Sharepoint auditing right now. We have a couple of web sites that are keyed to the WSS_Content Content Database. There are two main applications running right now. One of ...
2
votes
2answers
446 views

Auditing time on site collection

We have 18000 site collections, and on site collection creation, auditing was enabled with all options, because at some point auditing logs will need to be checked, probably with an external tool like ...
1
vote
1answer
263 views

How to delete data from AuditData table that does not exist any more?

Our auditData table is growing and growing. I was able to delete some data using the powershell script: foreach ($site in get-spsite -Limit ALL) { $site.Audit.DeleteEntries("05/01/2013") ...
1
vote
1answer
125 views

SharePoint Online Track Inactive Users

How do you setup auditing so that you can track users not interacting with SharePoint Online?
0
votes
1answer
439 views

How to know which users viewed which documents in provider-hosted Sharepoint 2013 App

In Sharepoint 2010 I used the SPSecurity.RunWithElevatedPrivileges and query the AuditLog to know which users viewed which documents inside a full-trust solution. Is there a way to get this data ...
1
vote
1answer
132 views

Logging document library views with HttpModule in SharePoint 2010

I am really new to SharePoint and got an assignment of logging Document Views into an external database in SharePoint 2010... While searching over the web, I have got lot of articles on the auditing, ...
3
votes
1answer
45 views

Audit the adminstrator

we are looking into the possibility of outsouring the administration of our farm. Because of the nature of sensitive data inside some of the site collection, we want to prevent data leakage. We want ...
2
votes
2answers
463 views

Restrict SPAuditQuery to return only results from a single SPWeb

It seems there is no simple way to only return results from an SPWeb and not the entire site collection when using SPAuditQuery to query the audit log. It's possible to use both: ...
1
vote
2answers
173 views

Auditing on PDF documents in a library

Had a request to see how often a pdf was being used within a document library so i setup a test library in one of my team sites and was able to enable auditing on the library, after some open attempts ...
0
votes
0answers
141 views

Just set up Item Level Auditing in SP2010, can see months of audit data

I'm fairly new to SharePoint administration... Up until this point, I've been mostly a front-end guy (custom lists, dashboards, all that jazz) and while I've had occasion to go into Central Admin or ...
2
votes
2answers
3k views

Track if the users have read documents Sharepoint 2010 Document Center

I want to track if the users have read sharepoint 2010 document center's documents, currently user infos are not stored in audit logs, is there any way to do it?
0
votes
1answer
328 views

What does the field <newauditmask> in the audit logs mean?

I see this in the Eventdata field of audit log reports for the event 'Audit mask change' <NewAuditMask>15295</NewAuditMask> <NewAuditMask>0</NewAuditMask> ...
0
votes
1answer
580 views

Custom Event data for audit log

I was wondering if it is possible to add custom information to the Eventdata field in audit log table.I am specifically interested in the Security group and Security group member delete events.By ...