Netwrix Auditor System Health – Event ID 1249

Copy Article URL Copied

Netwrix Auditor System Health event log contains the following Event ID: 1249

“The following error occurred when trying to write audit data to the SQL database”.

  • The database is unreachable.
  • Data Processing Account has insufficient permissions to write data to the database.

Try to connect to SQL Server instance, where the database with audit data is stored. Make sure the database is accessible.

  1. Navigate to Start > Run and type “cmd“.  Type “ping” and the name of the server where the audit data is stored. Make sure the server is reachable.
  2. On the server, where SQL Server instance is installed, start SQL Server Management Studio, connect to instance and make sure the database with audit data exists and not offline.

Note: To find out the database name where the audit data for monitoring plan is stored, navigate to Monitoring Plans > SharePoint monitoring plan > Edit settings > Audit Database.

Make sure the data processing account account is assigned with the database owner (db_owner) role on the database. Refer to for detailed instruction how to do it.

Go Up