Tuesday, August 12, 2014

SharePoint 2013: How to Audit Collaboration Sites


This posting walks through the process of configuring auditing for a collaboration site collection.  It engages the scenario where: as the farm administrator, you want to push down administration of collaboration sites but you still want to monitor critical activities, such as permission change and content deletions.

  1. Navigate to the collaboration site.
  2. Go to: Settings > Site Settings.  Look for Site collection audit settings.
  3. Click this link.  Look for Automatically trim the audit log for this site?
  4. Select Yes.
  5. Enter 30
    Note: you will not actually obtain a report until this amount of days have passed.  Therefore, if you want to obtain these report files on a more timely basis, set this to a smaller number of days.
  6. Click the Browse... button.  A popup will appear.
  7. Select the document library where you want the audit log stored to.  For this example, the Customized Reports document library was selected. 
  8. Click OK.  The relative URL to this library is inserted.  Note that the popup displays Customized Reports, but that the URL to this library seems to call it AnalyticReports.
  9. Enable the Deleting or restoring items and Editing users and permissions checkboxes. 
    The audit data generated by these two events will be sufficient for me as the administrator to track significant activities involving the collaboration site.
  10. Click OK.
  11. Go to: Settings > Site Settings. Look for Audit Log Reports.  It should appear in the Site Collection Administration group, just under the Site collection audit settings link. 
  • If you don't see the Audit Log Reports link, it may be that the site collection Reporting feature has not been activated.  Activate that feature, and the link should appear directly.
  • Also, be sure that you have enabled the Audit log enabled setting in the Secure Store Service Properties.

No comments: