1

Can I read from audit log, how many times item has been clicked? I know that I can do it using Server edition, but what about Foundation?

What I have done: Central Administration, I enabled Secure Store Service / "Audit log enabled"

enter image description here

I also installed https://auditlogsp.codeplex.com/ and I checked logs. However, it seems that Foundation do not save item openings?

enter image description here

I can read same log of course from database: WSS_Content.AuditData

My idea is get all items, which users have clicked most. Can anyone confirm, whether this possible?

I also tried using custom code, but some reason it return 0:

class MostViewedItems
{

public DataTable table = new DataTable();

public SPSite siteUrl;

public DataTable GetRecentlyViewedReports()
{
    try
    {
        table.Columns.Add("ItemId", typeof(Guid));
        table.Columns.Add("ItemName", typeof(string));
        table.Columns.Add("ItemCount", typeof(int));

        siteUrl = SPContext.Current.Site;
        string url = siteUrl.Url;
        SPSecurity.RunWithElevatedPrivileges(delegate()
        {
            using (SPSite site = new SPSite(url))
            {
                foreach (SPWeb web in site.RootWeb.GetSubwebsForCurrentUser())
                {
                    getRecentAuditlog(web, "Documents");
                    web.Dispose();
                }
            }
        });
        // TODO
    }
}

public void getRecentAuditlog(SPWeb web, string lst)
    {
        try
        {
            SPList list = web.Lists.TryGetList(lst);
            if (list != null)
            {
                SPAuditQuery spQuery = new SPAuditQuery(web.Site);
                spQuery.RestrictToList(list);
                spQuery.RestrictToUser(SPContext.Current.Web.CurrentUser.ID);
                spQuery.AddEventRestriction(SPAuditEventType.View);
                spQuery.SetRangeStart(DateTime.Today.AddDays(-30));
                spQuery.SetRangeEnd(DateTime.Today.AddDays(1));
                SPAuditEntryCollection auditCol = web.Site.Audit.GetEntries(spQuery);

                // auditCol returns 0
}
1

You have enabled auditing for the Secure Store Service and that only enables auditing for operations on the Secure Store Service Application.

You have to enable auditing for the site collection where your list resides.

As per the following comparison chart auditing is not included in SharePoint Foundation 2013, at least not using the UI.

SP 2013 version comparison chart

It can be enabled with PowerShell though:

$site = Get-SPSite http://site_URL 
$site.Audit.AuditFlags = [Microsoft.SharePoint.SPAuditMaskType]::Update #or any other mask type
$site.Audit.Update() 

Source

For SP 2013 Standard or Enterprise:

Go to Site Actions –> Site Settings –> Site Collection Administration –> Site Collection audit settings

| improve this answer | |
  • What about these two: goo.gl/G6JgLJ and goo.gl/GGXMvt ? Or is it the same thing? Secure Store Service Application? – user20968 Feb 12 '14 at 8:56
  • I haven't tried the second link. Its worth a try. Maybe MSFT's comperison chart is only for what's available with UI. If you have already done that then check the content database. With an SQL query check the entries in AuditData table. – Naim Murati Feb 12 '14 at 9:25
  • Yes, I was thinking also, that audit is missing only UI side. However, I can see easily what document have been added, modified or removed. But I cannot see document what users have opened. Or does I miss something? Because, it records View Events. I have tried find answer, what Foundation audit log saves, but no luck. I'm hoping that someone knows here. – user20968 Feb 12 '14 at 10:21
  • Ok, that means auditing is working. Make sure that the flag for view events is set. Check this example – Naim Murati Feb 12 '14 at 10:30
  • And one more issue I've seen users reporting lately that opening a document as read only is not registered as View event but opening for editing and closing without editing/saving registers the view event. Check that too. – Naim Murati Feb 12 '14 at 10:42
0

Following the instructions above, I was able to turn on auditing for one of my sites, but queries can only be run through PowerShell, on Foundation there is no GUI audit option (as mentioned above as well). Also, in my case the PowerShell script/commands required the farm account to run it, I kept getting an "Access denied" error when I was running it from my account (a local admin on the SharePoint box). I used:

$site = Get-SPSite http://site_URL
$site.Audit.AuditFlags = [Microsoft.SharePoint.SPAuditMaskType]::Update -bxor [Microsoft.SharePoint.SPAuditMaskType]::Delete
$site.Audit.Update() 

Then I used this command to pull site updates or deletes: $site.Audit.GetEntries()

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.