Netwrix Auditor System Health – Event ID 1214

SharePoint
9.0-9.7
9.8
https://kb.netwrix.com/2469
Copy Article URL Copied

Netwrix Auditor System Health event log contains the following Event ID: 1214

“The following error occurred when trying to write audit data to the SQL database: <error>”.


Check Netwrix Auditor version and review the possible error causes.

  1. The Data Processing Account has insufficient permissions to create temporary files that are to be copied to the SQL database in the folder with audit data.
  2. Incorrect SSRS settings specified in Netwrix Auditor.

To resolve this issue, follow the steps below:

  1. Grant the Data Processing Account write permissions to the temporary folder with audit data (by default, %ProgramData%\Netwrix Auditor\Netwrix Auditor for SharePoint\Configuration\”SharePoint monitoring plan GUID*“).
*In order to view your monitoring plan GUID, navigate to %programdata%\Netwrix Auditor\Audit Core\Config Server\Configuration.xml. Find the monitoring plan name in the configuration file:
<n n=”ManagedObjects”>
<n n=”GUID” t=”ManagedObject”>
….
<a n=”Name” t=”2″ v=”SharePoint monitoring plan name”/>
  1. Verify SQL Server Reporting Services settings: navigate to Settings > Audit Database and verify SQL Server Reporting Services settings.
Go Up