Netwrix Auditor System Health Log - Event ID 1006 / 1206

This article applies to Netwrix Auditor 6.0 and above. It explains the nature of the Event ID and provides resolution.
Email It to Me Print this Page
Symptoms Depending on your Netwrix Auditor version, the Netwrix Auditor System Health Log contains the following EventID
Netwrix Auditor 9.0 and above: 1206 - "Netwrix Auditor for SharePoint Core Service cannot be found".
Netwrix Auditor 8.5 and below: 1006 - "Netwrix Auditor Agent for SharePoint cannot be found".
 
Cause This can be due to one of the following reasons:
 
Netwrix Auditor 9.0 and aboveNetwrix Auditor 8.5 and below
  • The manual Core Service installation mode has been selected on monitoring plan creation, and the Netwrix Auditor for SharePoint Core Service cannot be found on the computer where SharePoint Central Administration is installed.
  • The manual Core Service installation mode has been selected but wrong SharePoint Central Administration URL was specified when creating a monitoring plan.
  • The manual Agent installation mode has been selected on Managed Object creation, and the Netwrix Auditor for SharePoint Agent  cannot be found on the computer where SharePoint Central Administration is installed.
  • The manual Agent installation mode has been selected, but wrong SharePoint Central Administration URL was specified when creating a Managed Object.
Resolution Do one of the following: Note: After the successful manual installation, the error will persist until the next scheduled data collection. Depending on your Netwrix Auditor version, do the following to launch data collection manually:
For Netwrix Auditor 9.0 and above: navigate to your SharePoint monitoring plan, select Edit  and click Update on the right pane.
For Netwrix Auditor 8.5 and below: navigate to your SharePoint Managed Object and click Run.
Was this information helpful?