Configuring Audit for a single library (SP 2013)

%3CLINGO-SUB%20id%3D%22lingo-sub-2126718%22%20slang%3D%22en-US%22%3EConfiguring%20Audit%20for%20a%20single%20library%20(SP%202013)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2126718%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20need%20to%20keep%20track%20of%20the%20documents%20that%20are%20being%20opened%20from%20specific%20library%20due%20to%20their%20sensitive%20nature%2C%20so%20after%20checking%20that%20the%20Reporting%20feature%20was%20enabled%2C%20I%20enabled%20the%20View%2FOpen%20event%20at%20library%20level%2C%20but%20I%20was%20not%20getting%20data.%20I%20followed%20this%20old%20article.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.ultimatewindowssecurity.com%2Fsharepoint%2Fauditpolicy%2Fview%2Fgranular.aspx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.ultimatewindowssecurity.com%2Fsharepoint%2Fauditpolicy%2Fview%2Fgranular.aspx%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20only%20started%20getting%20data%20when%20I%20enabled%20the%20audit%20at%20site%20level%2C%20but%20then%20I'm%20getting%20the%20audit%20information%20for%20all%20the%20site%2C%20not%20for%20only%20the%20library.%20Am%20I%20missing%20something%3F%20Is%20there%20any%20delay%20for%20the%20audit%20information%20when%20enabled%20only%20at%20list%2Flibrary%20level%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2126718%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2013%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDocument%20Library%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Visitor

Hi, I need to keep track of the documents that are being opened from specific library due to their sensitive nature, so after checking that the Reporting feature was enabled, I enabled the View/Open event at library level, but I was not getting data. I followed this old article.

https://www.ultimatewindowssecurity.com/sharepoint/auditpolicy/view/granular.aspx 

I only started getting data when I enabled the audit at site level, but then I'm getting the audit information for all the site, not for only the library. Am I missing something? Is there any delay for the audit information when enabled only at list/library level?

0 Replies