Banks, credit unions, insurance companies,
Netwrix Auditor System Health Log - Event ID 1087 / 1287
|Symptoms||Depending on your Netwrix Auditor version, the Netwrix Auditor System Health Log contains the following EventID
Netwrix Auditor 9.0 and above: 1287
Netwrix Auditor 8.5 and below: 1087
"Audit settings for read access events in site collection <ID> are not configured properly. As a result, some read access events may be lost".
|Cause||The Opening or downloading documents, viewing items and lists, or viewing item properties audit is disabled on the site collection.|
Netwrix Auditor 9.0 and above: navigate to Monitoring Plans --> your SharePoint monitoring plan --> Edit data source --> Configure audit settings. Select Adjust audit settings automatically.
Netwrix Auditor 8.0 and 8.5: In the Netwrix Auditor Administrator Console, navigate to Managed Objects --> your_SharePoint_Managed_Object --> SharePoint and click Configure Options. In the Options dialog, select Adjust audit settings automatically.