Netwrix Auditor System Health Log contains the following Event ID: 1041
“Audit settings for security events in site collection <ID> are not configured properly. As a result, some security events may be lost“.
The Editing users and permissions audit is disabled on the site collection.
Open Netwrix Auditor Administrator Console, navigate to Managed Objects –> your_SharePoint_Managed_Object –> SharePoint and click Configure Options. In the Options dialog, select Adjust audit settings automatically.
On your site collection that must be included in the audited scope, navigate to Site settings –> Site collection audit settings–> Specify the events to audit and select Editing users and permissions.