Netwrix Auditor System Health Log contains the following EventID: 1239
“The Audit log trimming setting for some SharePoint sites is not configured correctly. The recommended period is 7 days”.
The Audit log trimming for the site collection is turned off or exceeds 7 days.
Navigate to Monitoring Plans -> Your Monitoring Plan which contains SharePoint Data Source -> Select the Data Source and click Edit Data Source. Then select Adjust audit settings automatically.
On your site collection, that must be included in the auditing scope, navigate to Site settings –> Site collection audit settings. In the Audit Log Trimming section, do the following:
- Set Automatically trim the audit log for this site to “Yes“.
In Specify the number of days of audit log data to retain set retention to 7 days.