Configuring Auditing in SharePoint 2010
Configuring Auditing in SharePoint 2010
Auditing comes out of the box in SharePoint 2010. Although there is nothing to prevent you from doing so, auditing is not the tool to use to track what users are doing to satisfy curiosity. Auditing is something you do because you have to. It is something you are required to do in order to be compliant with a law, or standard, or some business rule. As long as we understand what we are required to audit, it's so easy to set up, even the fictional character The Mangler would do it, and he isn't one to want to comply with anything.
If you are interested in seeing how people are using your site collections and or sites, the built in Web Analytics tools are awesome in SharePoint 2010 and should give you everything you need there.
Auditing can be configured for a site collection, a list or library, or based on a content type as part of an organizations information management policy.
There are of course a few ways of going about this but I'm going to keep it simple.
In this blog I have created a site collection and based it on the Team Site template. I will configure auditing on the Shared Documents library.
I will configure auditing on the following:
- Opening or downloading documents, viewing items in lists, or viewing item properties.
- Editing Items
- Checking out or checking in items
- Moving or copying items to another location in the site
- Deleting or restoring items.
You will have to be a Site Collection Administrator in order to complete all the tasks in this blog.
I click on Library > Library Settings in the Shared Documents document library.
I click on Information management policy settings
I click on Document since that's what I'm auditing.
I select the checkbox next to Enable Auditing
Select Events to Audit
I select the events to audit by checking the box next to them. In this case I check all of them and then I click OK.
I verify the fact that Document has a Custom policy attached to it.
I added a bunch of documents to the Shared Documents Library, checked some out, deleted some, and restored them so now I'll check the audit log reports to make sure it's working. To do this I'll go Site Actions>Site Settings
Audit Log Reports
I click on Audit Log Reports in the Site Collection Administration section.
I can choose any of the reports that I want but if there is no data I will get an error saying there is not data. Since I know that I deleted and restored some items I'll choose Deletion.
I'll save this report to the Shared Documents Library, however in production this is where I create a document library with unique permissions so only Site Collection Administrators can see the contents. I click on Browse.
I select Shared Documents and click OK.
I click OK
I click to view the report.
the Big What Moment
I see a summary of my actions. The really important information however is in the Report Data Worksheet Tab so I click that at the bottom of the workbook.
This is the report data that can be tied into IIS logs and supply any required information.
There is much more to auditing but this is a good start. It's boring but it works.
You May Also Like
Mark Jacob, Cisco Instructor, presents an introduction to Cisco Modeling Labs 2.0 or CML2.0, an upgrade to Cisco’s VIRL Personal Edition. Mark demonstrates Terminal Emulator access to console, as well as console access from within the CML2.0 product. Hello, I’m Mark Jacob, a Cisco Instructor and Network Instructor at Interface Technical Training. I’ve been using … Continue reading A Simple Introduction to Cisco CML2
This content is from our CompTIA Network + Video Certification Training Course. Start training today! In this video, CompTIA Network + instructor Rick Trader teaches how to create Dynamic DNS zones in Network Environments. Video Transcription: Now that we’ve installed DNS, we’ve created our DNS zones, the next step is now, how do we produce those … Continue reading Creating Dynamic DNS in Network Environments
This content is from our CompTIA Network + Video Certification Training Course. Start training today! In this video, CompTIA Network + instructor Rick Trader demonstrates how to use cable testers in network environments. Let’s look at some tools that we can use to test our different cables in our environment. Cable Testers Properly Wired Connectivity … Continue reading Cable Testers and How to Use them in Network Environments