Audit log reports in SharePoint, used to check who did what.
We can check, sort, filter, and analyze the data in sites, lists, libraries,
content types, list items, and library files in the site collection. It is very
helpful for the organization. We can also save the audit log report as excel
work book in specified site collection document library
Following events are available for auditing log reports to check who did what,
Following events are available for auditing log reports to check who did what,
- Viewed and downloaded items/documents
- Checked In/ checked out items, moved and copied items in list/libraries
- Deleted, restored items
- Work flow and custom events in site collection
- User permission changes at site collection level
- Content type and column changes
Following are the reports available in share point auditing
- Content Viewing -> shows all events where a user viewed content in this site.
- Content modifications -> shows all events that modified content in this site.
- Content deletion -> shows all events that caused content in this site to be deleted or restored from the Recycle Bin.
- Content type and list modifications -> shows all events that modified content types and lists in this site.
- Information management policy modification -> shows all events related to the creation and use of information management policies on content in this site.
- Information management policy Expiration and disposition -> shows all events related to the expiration and disposition of content in this site.
- Security and site settings Auditing -> shows all events that change the auditing settings of Microsoft SharePoint Foundation.
- Security and site settings Security -> shows all events that change the security configuration of Microsoft SharePoint Foundation.
- Custom report -> shows specified filters for audit report
We can view the audit log reports by clicking on the “Audit
log reports” in Site collection Administration group in Site settings.
Configure auditing:
We have option to configure track which users have taken
what actions on the sites, content types, lists, libraries, list items, and
library files of site collections. In Site settings we can configure the audit
logging by clicking on “Site collection auditing settings” in "Site Collection
Administration" section.
Configure trimming:
When we select to audit an event in site collection, it will
audited each time the event occurs. It will cause to generate a large number of
audit log. This could cause degrading the performance and fills the memory in
hard drive. To prevent this, we need to enable the audit log trimming in site
collection. We can do this in site settings -> Site collection
Administration -> Site Collection audit log settings.
Select “yes” for “Automatically trim the audit log for this
site?” in “Audit Log Trimming”
section. Specify number of days that audit log remain.