question

ReeceJohn-3398 avatar image
0 Votes"
ReeceJohn-3398 asked EmilyDu-MSFT commented

SharePoint 2019 Audit Report - when site collection reporting feature has not been activated

We have a site collection where site collection audit log reporting is not active, but we need to obtain an activity report for investigating user activity.

  • Is there a way to capture SQL server level user activity and generate a report for a site collection?

  • When you activate site collection audit log reporting on a site collection, the audit activity captured starts at that point, correct?

office-sharepoint-server-administration
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@ReeceJohn-3398

I'm checking how the things are going on about this issue. Whether the answer helps you?

You can accept the answer if it helps.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 Votes 0 ·

@ReeceJohn-3398

Is there any progress on this issue?

If you find any answers helpful to you, please remember to accept them.

It will help others who meet the similar question in this forum.

Thank you for your understanding.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.




0 Votes 0 ·

1 Answer

EmilyDu-MSFT avatar image
0 Votes"
EmilyDu-MSFT answered EmilyDu-MSFT edited

@ReeceJohn-3398

1.If you want to enable audit log in a site collection, here’re steps.
(1)Go to Central Administration -> Manage service applications -> Select Secure Store Service application, and click the properties from the ribbon -> Enable audit and set the number of days to keep audit logs until be purged.
(2)Go to site settings -> Click the Site collection audit settings -> Configure the audit log settings.
(3)Go to site settings -> Click the content type you want to -> Click the Information management policy setting -> Enable auditing.
(4)Go to site settings -> Site collection features -> Activate Reporting feature.
(5)Go to sites settings page -> Click the Audit log reports -> Click content viewing report, you also can click custom reports to custom your content viewing report.

Reference:
Configure audit data for a site collection
Configure audit log feature

2.Reporting feature in the site collection features is used to export reports and it cannot decide whether to record the audit logs.
3.If you enable audit log in a site collection, go to Microsoft SQL Server Management Studio -> WSS_content database -> AuditData table to see activities.
4.If you enable the audit log in a site collection on a certain day, it starts to record audit log from that day.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.




· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@EmilyDu-MSFT , thank you.

If audit logs were not activated at the site collection level, are there any logs that can be obtained at the server level that could give us similar information to review site activity?

We have a request to discover user activity on a site collection where audit logging was not active.

Any additional input is appreciated.

Thanks again,

John

0 Votes 0 ·

@ReeceJohn-3398
1.If audit log feature is not activated in the site collection level, there are no audit logs can be recorded in the server level.
2.I don’t think there are other ways like audit log to check site activities. Site Activity web part may be a choice.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 Votes 0 ·