Netwrix Auditor System Health event log contains the following Event ID: 1280
“Netwrix Auditor Server failed to save audit data to Audit Archive.”
Netwrix Auditor Archive Service service is stopped.
In order to save the changes to Audit Archive, follow the steps:
- Start Netwrix Auditor Archive Service, navigate to Start > Administrative Tools > Services, locate the service, right-click over it and select Start.
- Restart the data collection:
- Navigate to Monitoring Plans > SharePoint monitoring plan > Edit and click Update.
Now the changes are saved in Audit Archive and Netwrix_Auditor_SharePoint database (or any custom database you specified while creating this monitoring plan).