Yesterday,
one of my users reported me the following error message for the site collection
on which he was working:
Report contains no data
As
we know, only site collection administrator works/can view the audit log
reports so my user clicked on the report and got the above mentioned error
message.
What you have to do in this situation:
1) Open the
site on which you are working
2) Site
actions
3) Site
settings
4) Site
collection administration
5) Site
collection audit log settings
6) Select
the columns as per your requirements
The
following list of events can be audited:
1) Opening,
Downloading and viewing of content.
2) Editing
Content
3) Checking
in and out.
4) Moving
and copying content.
5) Deleting
and restoring.
6) Editing
Content Types and Columns
7) Searches
performed by users.
8) Changes
to security settings.
Note: Make sure you do some activity in order to get the
reports because you have implemented the audit logs by checking all
the appropriate audit events.
Once auditing has been enabled and the site has been in use
for a while. Different reports can be pulled from the log. If no data has been
recorded in the log, then the reports will simply not open.
After
doing the above mentioned steps, your issue will be resolved..
In
case of any queries/questions regarding the above mentioned information then
please let me know, Thanks…
How to integrate an enterprise application into sharepoint and generate reports?? Can you please let me know the various ways/steps of doing this?
ReplyDeleteCould you please give me some brief details regarding this enterprise application that you are going to integrate so that i can look into and provide you the complete info ? Thanks
ReplyDeleteMore Info:
ReplyDeleteIf you are using SharePoint Online for Microsoft Office 365 for enterprises, auditing for Opening or downloading documents, viewing items in lists, or viewing item properties is not available because of storage and performance concerns
Thanks Jay for sharing this valuable info :) this will be helpful for the complete sharepoint communities.
ReplyDeleteHi Amol,
ReplyDeletedo you have any idea how to check audit log in SQL database?
S
Hello,
ReplyDeleteSQL auditing can be done by using logging database
it includes:
ULS Logs
Event Logs
Blocking SQL Queries
SQL DMV Queries
Feature Usage
A host of information on search crawling and querying
Inventory of all site collections
Timer job usage
The logging database is a fantastic way to get an insight into what is happening within a farm. I’ve lost count of the number of times customers have complained about random performance problems but as they didn’t have any proactive monitoring in place this was nearly impossible to pinpoint.
Please let me know your thoughts on this so we can discuss ahead. Thanks for your patience
Thanks Amol,
ReplyDeleteActually Client has deleted doc library and i am not able to find out in recycle bin. I've checked audit logs (customize as well), auditlog table in sql, Event logs, IIS logs and I am not able to find out who has deleted doc file. :(
S
if you have set up the auditing on that site collection then it should be captured in the reports. also you will get some traces in IIS as well.
ReplyDeletelet me know in case of any further queries, Thank you.
I've checked every options in sharepoint, but no luck.
ReplyDeleteS
hmm, that's strange.
ReplyDeleteTo avoid such situations from future perspective, could you please cross-check the auditing options and make sure that 'DELETE' is checked in that list?
Please let me know in case of any further queries, Thank you
Great post. I was checking continuously this blog and I'm impressed! Extremely useful information specifically the last part :) I care for such information a lot. I was seeking this certain information for a very long time. Thank you and good luck.
ReplyDeleteMy blog; No2 Maximus Reviews
Works perfectly!
ReplyDeleteIf you need further SharePoint Analytics reports for SharePoint 2013, 2010, 2007 or SharePoint Online, you should try CardioLog Analytics - Free Edition, which was specifically designed for all SharePoint environments: http://www.intlock.com/free
ReplyDeleteThank you for sharing this! This will be useful for the complete sharepoint community.
DeleteI am trying to get the Audit Log report for “open or download” event.
ReplyDeleteWorking Scenario :
1. Audit Log Enabled to my library for View Event
2. Download .txt or .png file from Library
3. I can see the entry in Report
Issue Scenario :
1. Audit Log Enabled to my library for View Event
2. Open .txt or .png file in browser
3. I cannot see the entry in Report
Can you please suggest the reason ?
two suggestions:
Delete1- Try to check the audit settings by means of sharepoint designer as it has some enhanced options as compare to GUI.
2- By means of GUI, try to setup custom audit report and mention your requirements
1.In the Custom audit report, tried enabling this option- "Opening or downloading documents, viewing items in lists, or viewing item properties" and tested . It is not working. Still i can see the download events but not .txt opened in browser.
Delete2. Can you please give the steps to check via SharePoint Designer.
Its perfectly working at my end.
DeleteI reproduced the issue and i can see the .txt and .png entries in the report.
View audit log reports, on the View Auditing Reports page, select Content viewing and the entries related to the .txt or .png files appear in Report.
I suggest to check whether you configure audit settings correctly and then follow the steps above the view the Report.
You are right, problem is at Settings. Thanks a lot !
DeleteEnabling the Audit Settings at "Site Level" is working fine, But my goal is to enable the auditing to the desired library.
To achieve this, do we need to use content type?, If we use Content Type, does it affects the other library?. I just messed up.
Can you please suggest the best way to enable the audit settings to the specific Document Library
I would not recommend to use the content type. but what i can suggest is-
DeleteSee, we are most flexible to use Excel in our day-to-day life so once you will export the audit reports, they will ultimate.ly be saved as excel only. apply filters and sort the results with respect to that document library. Simple and Easy option!
Let me know in case of any further queries, Thanks for your patience.
Thanks for your valuable suggestion, but we believe that, Site Level Auditing may reduce the performance of the site, We have more than 25 libraries, In that we need to monitor only one library which is more secure.
DeleteEnabling at site level will store the records for remaining 24 libraries which we feel it unnecessary.
I am reading the log content via Server object model API -SPAuditClass,not through OOB (I thought it is not our concern, so i didn't mentioned this earlier)
Still i didn't get the clear idea to enable auditing at library level. any help is highly appreciable.
One thing will be pretty much sure that it is not possible out of box and might be possible using coding approach. I have never done this but now i need to check. will update if i gets the resolution quickly. Thank you.
DeleteThanks for spending your time on this. From your statement i understood that, Enable Auditing at library level via OOB is not possible. but still We can try to enable this via Coding.
DeleteI am also trying this, If you got the solution. Kindly let me know. Thanks Again.
sure will try my best to get on this and update the solution. Thank you.
DeleteBelow code activates the Auditing at Site Level and this gives the desired result.
DeleteSPSite siteCollection = new SPSite("SiteUrl");
siteCollection.Audit.AuditFlags = SPAuditMaskType.View;
siteCollection.Audit.Update();
Below code activates the Auditing at Library Level and this not giving the clear result.
SPSite siteCollection = new SPSite("Siteurl");
SPWeb site = siteCollection.RootWeb;
SPList docLib = site.Lists["Library"];
docLib.Audit.AuditFlags = SPAuditMaskType.View;
docLib.Audit.Update();
I don't get the logic where went wrong.
hmm. strange one! Did you try this for new site collection or on the existing one also?
DeleteI'm having a weird problem. everything is configured, so I can view all audit reports except "Content Viewing". after clicked "content viewing", it shows "working on it....shouldn't take long", and never stop or show any error message no matter how long I wait. It is SP2013, though. Any suggestions? Thanks
ReplyDelete