Netwrix Auditor EventLog – Event ID 1079

SharePoint
6.5 and older
https://kb.netwrix.com/1133
Copy Article URL Copied

Netwrix Auditor EventLog contains eventID 1079: “The Change Summary may include incomplete data as the data collection was still in progress when the report was sent. No data loss has occurred, the missing events will be listed in the next Change Summary and added to the database”.


Since the data collection exceeded the predefied timeout period for its completion (1 hour), the Change Summary was generated while the data collection was still in progress.


No data loss has occurred, the missing events will be listed in the next Change Summary and added to the database.
To generate a new Change Summary, in Netwrix Auditor Console, navigate to Managed Objects –> your_SharePoint_Managed_Object and click Run.
If the error persists:

  1. Navigate to %ProgramData%NetwrixNetwrix Auditor for SharePointConfiguration<your_SharePoint_Managed_Object>commonsettings.config.
  2. Set WaitSynchronizationTaskTimeout to “72000000000“.
  3. Restart the Netwrix Auditor Service for SharePoint (your_SharePoint_Managed_Object) service. To do it, navigate to Start –> Administrative Tools –> Services, locate this service, right-click it and select Restart.
Go Up