Go Up
You are here: DeploymentConfigure IT InfrastructureSharePoint

Configure SharePoint Farm for Monitoring

You can configure your SharePoint farm for monitoring in one of the following ways:

  • Automatically when creating a monitoring plan. If you select to configure audit in the target SharePoint farm automatically, your current audit settings will be checked on each data collection and adjusted if necessary.

    NOTE: In this case, Netwrix Auditor will enable automatic audit log trimming for all monitored site collections; log retention period will be set to 7 days. Also, consider that after a site collection is processed, Netwrix Auditor will automatically delete the events older than 1 day from its audit log.

Configure Audit Log Trimming

  1. Log in as an administrator to the audited SharePoint site collection.
  2. Depending on SharePoint you are running, do one of the following:
    • SharePoint 2010—In the upper-left of your site collection, select Site Actions Site Settings.
    • SharePoint 2013 and 2016—In the upper-right of your site collection, select Settings (gear) Site Settings.
  3. Under the Site Collection Administration section, select Site collection audit settings.
  4. In the Audit Log Trimming section, do the following:
    • Set Automatically trim the audit log for this site to "Yes".
    • In Specify the number of days of audit log data to retain set retention to 7 days.

      NOTE: You may keep the existing audit log retention provided that it is set to 7 days or less.

Configure Events Auditing Settings

  1. Log in as an administrator to the audited SharePoint site collection.

  2. Depending on SharePoint you are running, do one of the following:

    • SharePoint 2010 — In the upper-left of your site collection, select Site Actions Site Settings.
    • SharePoint 2013 and 2016 — In the upper-right of your site collection, select Settings (gear) Site Settings.
    • SharePoint 2019 — In the upper-right corner, click Settings (gear).

  3. Under the Site Collection Administration section, select Site collection audit settings.
  4. In the List, Libraries, and Sites section, select Editing users and permissions.

    NOTE: Enable Opening or downloading documents, viewing items in lists, or viewing item properties for read access auditing.

    Consider that if you are using SharePoint 2019, then to enable this option you will have to adjust audit settings automatically with Netwrix Auditor (as described in the Settings for Data Collection section), or use some scripting.

Enable SharePoint Administration Service

This service is must be started to ensure the Netwrix Auditor for SharePoint Core Service successful installation. Perform the procedure below, prior to the Core Service installation. See Install Netwrix Auditor for SharePoint Core Service for more information.

  1. On the computer where SharePoint Central Administration is installed and where you intend to deploy Netwrix Auditor for SharePoint Core Service, open the Services Management Console. Navigate to Start Windows Administrative Tools (Windows Server 2016) or Administrative Tools (Windows 2012 R2 and below) Services.
  2. Locate the SharePoint Administration service (SPAdminV4), right-click it and select Properties.
  3. In the General tab, set Startup type to "Automatic" and click Apply.
  4. Click Start to start the service.

Go Up