I want to set up auditing on my dev SP farm and need to know if this is set up properly, plus if there were recommendations for a better configuration. The proof of concept is as follows:

in Run a Custom Report > Customize:

• Automatically trim the audit log for the site? Yes
• Location: Restrict this report to /apps/salaries/list
• Date Range: 6/1/2015 - 6/15/2015
• Users: none specified, want to see all users
• Events: all checked

Current Audit settings: I'm having a little trouble understanding some of these. Does this mean that every 60 days, a log file will be created in /AnalyticsReports containing the previous 60 days of log information? So if I wanted to generate a Custom Report on user action data from ~90 days ago (as in the example above), would that logging data be accessed by the Custom Report's query?

• Automatically trim the audit log for the site? Yes
• Number of days of audit log data to retain: 60
• Location to store audit reports before trimming audit log: /AnalyticsReports
• Documents and Items: all are selected
• List LIbraries and Sites: all

Thanks in advance,

Scott

• Edited by scogordo Saturday, September 12, 2015 1:31 AM

Hi Scott,

As I understand, you want to set up audit on your dev farm in SharePoint 2013

Number of days of audit log data to retain:  the audit log data will be retained for the number of days. The default setting for this option is 0 day. That means if you don't specify a different retention period, all audit log entries are deleted at the end of the month.

If you set this option is 60 days, it will retain the audit log data for 60 days, it will not delete the audit lod data at the end of the month.

For more detailed information, you could refer to the article below.

The article below is about configuring audit settings for a site collection in SharePoint 2013.

https://support.office.com/en-ca/article/Configure-audit-settings-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2

Best regads,

Sara Fan

I hope the above suggestion clarifies you concern to get this job done. Moreover, If you wish you may also have a look on below given informative resources that might helps you.

Checkout the below given earlier discussed threads:

Audit log Trimming in SharePoint 2010: https://social.technet.microsoft.com/Forums/en-US/7c1e76d8-bebb-480f-97dc-d577351032ff/audit-log-trimming-in-sharepoint-2010-?forum=sharepointadminprevious

Audit Log Trimming questions: https://social.technet.microsoft.com/Forums/en-US/79e87110-7348-4ac2-83d5-f3bd86ca38b6/audit-log-trimming-questions?forum=sharepointgeneralprevious

Setup Audit Logging in SharePoint 2010 to accomplish this task for more please visit this blog (http://blogs.interfacett.com/configuring-auditing-sharepoint-2010) to see how this is accomplished. Check out this informative article (https://support.office.com/en-us/article/View-audit-log-reports-4293e8d5-4e7d-4201-b8ac-c8e63a100131?CorrelationId=9c16738c-35a2-4e07-959d-39e9f21864b2&ui=en-US&rs=en-US&ad=US) to see what all features are captured in Audit logging.

Managing SharePoint 2010 auditing settings with PowerShell: http://www.sharemuch.com/2011/03/20/managing-sharepoint-2010-auditing-settings-with-powershell/

If you wish you may also try this solution i.e. ( http://www.sharepointauditing.com/ ) to audit the who, when and what does in SharePoint environment.

Hope it helps you!

• Edited by KHart85 36 minutes ago