Netwrix Auditor EventLog - Event ID 1079

This article applies to Netwrix Auditor 6.5 and below. It explains the nature of the Event ID and provides resolution.
Email It to Me Print this Page
Symptoms Netwrix Auditor EventLog contains eventID 1079: "The Change Summary may include incomplete data as the data collection was still in progress when the report was sent. No data loss has occurred, the missing events will be listed in the next Change Summary and added to the database".
Cause Since the data collection exceeded the predefied timeout period for its completion (1 hour), the Change Summary was generated while the data collection was still in progress.
Resolution No data loss has occurred, the missing events will be listed in the next Change Summary and added to the database.
To generate a new Change Summary, in Netwrix Auditor Console, navigate to Managed Objects --> your_SharePoint_Managed_Object and click Run.
If the error persists:
  1. Navigate to %ProgramData%\Netwrix\Netwrix Auditor for SharePoint\Configuration\<your_SharePoint_Managed_Object>\commonsettings.config.
  2. Set WaitSynchronizationTaskTimeout to "72000000000".
  3. Restart the Netwrix Auditor Service for SharePoint (your_SharePoint_Managed_Object) service. To do it, navigate to Start --> Administrative Tools --> Services, locate this service, right-click it and select Restart.
Was this information helpful?