compdigit44
asked on
Step-by-Step Setup of Sharepoint 2010 Auditing for one site
About a month ago I opened a similar question on how to setup Sharepoint auditing https://www.experts-exchange.com/myKnowledgebaseView.jsp?knowledgebaseEntryId=263596
The problem is I am not that great in sharepoint and ending up still having questions with the links that were provided after the fact.
My main sharepoint 2010 site is something like sharepoint.domain.com management wants to enable auditing to see who is accessing one site and what they access. For example the site would be like sharepoint.domain.com/site
Is there a step-by-step guide to set this up from the ground up?
The problem is I am not that great in sharepoint and ending up still having questions with the links that were provided after the fact.
My main sharepoint 2010 site is something like sharepoint.domain.com management wants to enable auditing to see who is accessing one site and what they access. For example the site would be like sharepoint.domain.com/site
Is there a step-by-step guide to set this up from the ground up?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You can't do that. You CAN however filter the Excel file that SharePoint creates to only see your subsite. The file gets created in Site Settings - Audit Log Reports. Will take 24 hours before they show up.
ASKER
so one site collection per site correct....will the report list what the users access? Can the report be emailed out daily?
SO there no way to filter the Excel file in sharepoint but you have to do it manually correct?
SO there no way to filter the Excel file in sharepoint but you have to do it manually correct?
A site collection contains one or more sites. All of the sites within the site collection are in the report.
The report will list what you choose to audit - read the documentation already posted.
No the report won't be emailed, but you could automate that with a workflow.
You could edit Excel files in browser if you have Excel Services / OWA deployed.
The report will list what you choose to audit - read the documentation already posted.
No the report won't be emailed, but you could automate that with a workflow.
You could edit Excel files in browser if you have Excel Services / OWA deployed.
ASKER
where are the default Excel reports / logs stored by default?
ASKER
I see you can only save the reports to a list can they be saved to a network share?
compdigit44: In SharePoint 2010, the reports are generated and stored in a specific list. However, as Justin Smith mentioned, you could use SharePoint Designer to create a List Workflow, which, when a new item is added, will email certain people that a new report is ready. You could also do the same thing using Alerts. The recipient will get a link that takes them directly to the document or library.
Note that SPD workflows do not have the ability to send the file as an attachment; I am sure this was a design choice by Microsoft to keep documents centrally located in a library rather than ending up with version hell as multiple copies are floating around. There are some CodePlex solutions (http://sharepointstuff.codeplex.com/) that will override this and allow you to send an attachment. Haven't tried it myself.
All this comes down to the fact that the built-in auditing in SP 2010 is rather rudimentary and does, in most cases, require you to massage the data a little to get something useful out of it. In SharePoint 2013 the reports are a little more customizable, and in SP 2016 (and SharePoint Online), the feature has been greatly improved by the addition of the Compliance Center, which can be filtered down to target a particular document or user.
Ref:
SP 2010:
http://sharepointthomas.blogspot.com/2011/07/how-to-enable-audit-functionality-in.html
SP 2013:
http://sharepoint-works.blogspot.com/2013/07/audit-logging-in-sharepoint-2013.html
http://sharepoint.stackexchange.com/questions/146114/how-to-audit-one-specific-list-library
SP 2016:
https://blogs.office.com/2016/02/17/auditing-reporting-and-storage-improvements-for-sharepoint-online-and-onedrive-for-business/
Note that SPD workflows do not have the ability to send the file as an attachment; I am sure this was a design choice by Microsoft to keep documents centrally located in a library rather than ending up with version hell as multiple copies are floating around. There are some CodePlex solutions (http://sharepointstuff.codeplex.com/) that will override this and allow you to send an attachment. Haven't tried it myself.
All this comes down to the fact that the built-in auditing in SP 2010 is rather rudimentary and does, in most cases, require you to massage the data a little to get something useful out of it. In SharePoint 2013 the reports are a little more customizable, and in SP 2016 (and SharePoint Online), the feature has been greatly improved by the addition of the Compliance Center, which can be filtered down to target a particular document or user.
Ref:
SP 2010:
http://sharepointthomas.blogspot.com/2011/07/how-to-enable-audit-functionality-in.html
SP 2013:
http://sharepoint-works.blogspot.com/2013/07/audit-logging-in-sharepoint-2013.html
http://sharepoint.stackexchange.com/questions/146114/how-to-audit-one-specific-list-library
SP 2016:
https://blogs.office.com/2016/02/17/auditing-reporting-and-storage-improvements-for-sharepoint-online-and-onedrive-for-business/
You click Site Settings - Audit Log Reports.
Please read the documentation.
Please read the documentation.
The audit functionality can be enabled on different levels in SharePoint’s containment hierarchy. Specifically, you can enable auditing on these levels: site collection, library/list, folder, and content type.
Site Collection
- Go to Site Actions –> Site Settings –> Site Collection Administration –> Site Collection audit settings.
- Under the Document and Items section you can enable the events you would like to audit.
Library/list
- Go to [yourlibrary] –> Library Tools/Library –> Library Settings –> Permissions and Management –> Information management policy settings.
- Under the Content Types Policies section you can define a new policy or choose an existing policy (created in the site collection).
To get in more detailed please refer to below links:
http://sharepointthomas.blogspot.in/2011/07/how-to-enable-audit-functionality-in.html
https://community.spiceworks.com/how_to/126012-how-to-track-changes-on-sharepoint-server-2013
Hope this helps!
Site Collection
- Go to Site Actions –> Site Settings –> Site Collection Administration –> Site Collection audit settings.
- Under the Document and Items section you can enable the events you would like to audit.
Library/list
- Go to [yourlibrary] –> Library Tools/Library –> Library Settings –> Permissions and Management –> Information management policy settings.
- Under the Content Types Policies section you can define a new policy or choose an existing policy (created in the site collection).
To get in more detailed please refer to below links:
http://sharepointthomas.blogspot.in/2011/07/how-to-enable-audit-functionality-in.html
https://community.spiceworks.com/how_to/126012-how-to-track-changes-on-sharepoint-server-2013
Hope this helps!
ASKER
Thank you all for the great help... One final question, is there an easy way for me to tell how many Site Collections I have in place?
Go to central administration --> application management and click "view all site collections". In the top right click the drop down to select the desired web application. Then you can see all the site collections for that web app. You can do the same thing using powershell Get-SPSiteCollection.
I also like a tool called documentation toolkit for SharePoint (http://spdockit.com), which has a free trial and will gather lots of great info about your farm, including a list of all site collections and their utilization.
I also like a tool called documentation toolkit for SharePoint (http://spdockit.com), which has a free trial and will gather lots of great info about your farm, including a list of all site collections and their utilization.
This question needs to be closed a new one open for your new question. Plus the answer Mofitar gave is incorrect.
Right, it's Get-SPSite. My bad. I always rely on intellisense to complete my commands.
ASKER