Netwrix Auditor System Health – Event ID 1014

SharePoint
6.5 and older
7.0-8.5
https://kb.netwrix.com/1115
Copy Article URL Copied

Netwrix Auditor System Health event log contains the following Event ID: 1014
“The following error occurred when trying to write audit data to the SQL database: <error>”.


Check Netwrix Auditor version and review the possible error causes.

  1. The Data Processing Account has insufficient permissions to create temporary files that are to be copied to the SQL database in the folder with audit data.
  2. Incorrect SSRS settings specified in Netwrix Auditor.

Follow the steps below:

  1. Grant the Data Processing Account write permissions to the temporary folder with audit data (by default, %ProgramData%\Netwrix Auditor\Netwrix Auditor for SharePoint\Configuration\”SharePoint monitoring plan GUID*“).
*In order to view your Managed Object GUID, navigate to %programdata%\Netwrix Auditor\Audit Core\Config Server\Configuration.xml. Find the monitoring plan name in the configuration file:
<n n=”ManagedObjects”>
<n n=”GUID” t=”ManagedObject”>
….
<a n=”Name” t=”2″ v=”SharePoint managed object name”/>
  1. Verify SQL Server Reporting Services settings. Do the following, depending on the current Netwrix Auditor version:
  • Netwrix Auditor 7.1 – 8.5: In Netwrix Auditor Administrator Console, navigate to AuditArchive > Audit Database and verify your SQL Server and Reporting Services settings.
  • Netwrix Auditor 7.0: In Netwrix Auditor Administrator Console, navigate to Settings > AuditIntelligence and verify your SQL Server and Reporting Services settings.
  • Netwrix Auditor 6.5 and below: In the Netwrix Auditor console navigate to Settings > Reports and verify your SQL Server and Reporting Services settings.

 

Go Up