Problem Description: While saving an audit logs to a library user is getting “An Unexpected error has occurred” following a correlation.
Error Message: An unexpected Error has occurred.
Troubleshooting:
We have checked this Audit logs settings and it was enabled.
We have run all the reports one by one and all of them were having problem.
There is only site which was having issue.
Based on the correlation ID in the error message, Checked the ULS logs from the server and found the below logs.
Resolution:
Tried Goggling on the same issue with the keyword: System.InvalidCastException: Specified cast is not valid. at Microsoft.Office.RecordsManagement.Reporting.ReportData.GenerateNextReport().
Found only one reference which talks about the resolution:
Resolution Steps:
Go to Site Actions.
Choose to select Site Settings.
Under Site collection administration tab.
Choose to select Site collections features.
Look for Reporting feature. (It should be activated by default).
Click Deactivate and a warning message would appear, Select Deactivate this feature.
You will be taken to the site collection administration Feature list. Choose to click Activate.
And now try to run the Audit Logs Report and now you should be able to save the reports to desired library.
Note: You should have the site collection rights to perform the above given steps.
If you have any queries/questions regarding the above mentioned information then please let me know.
I would be more than happy to help you as well as resolves your issues, thank you.
Applies to: SharePoint Foundation Server 2010, SharePoint 2010.
You could just avoid these issues and use LOGbinderSP for your sharepoint auditing. Saving the audit logs to a doc library is not best practice. Disgruntled admin "A" logs in, deletes a huge amount of data, downloads all of your confidential docs, and then deletes the audit log from the doc library. He's covered his tracks. You need to get the audit log from SharePoint out of the application and in to your security log or SIEM. For that you need LOGbinderSP. If you (or anyone else) want a free trial just go to logbinder.com and download a fully functional 30 day trial copy. You'll have with the results.
ReplyDeleteIs it easy to Learn Share Point
ReplyDeleteI want to learn Share Point
ReplyDelete