Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Netwrix Auditor System Health Log - Event ID 1281 - 1283 OR 1081 - 1083
This article applies to Netwrix Auditor 7.0 and above. It explains the nature of the Event ID and provides resolution.
KB2036 | Last review: Dec 06, 2017 | Netwrix Auditor for SharePoint | Netwrix Auditor 7.0 and above
|Symptoms||Depending on your Netwrix Auditor version, the Netwrix Auditor System Health Log contains the following EventID
Netwrix Auditor 9.0 and above: 1281, 1282, 1283
Netwrix Auditor 8.5 and below: 1081, 1082, 1083:
Event ID 1281 / 1081: Failed to delete temporary files while saving audit data to Audit Archive due to the following error: <errormsg>.
Event ID 1282 / 1082: Netwrix Auditor Server failed to read an internal file from Audit Archive: <errormsg>. Audit data retrieving restarted from the beginning, hence, reports and ActivitySummaries may contain duplicate data.
Event ID 1283 / 1083: Netwrix Auditor Server failed to read an internal file from Audit Archive: <errormsg>. Some audit data may be missing in your Activity Summaries and reports.
|Cause||Review the possible error causes:
<a n="Name" t="2" v="your_SharePoint_Managed_Object_name"/>
|Resolution||Follow the resolution prompts:
Was this information helpful?