"

Netwrix Auditor System Health Log – Event IDs 1211, 1215, 1226-1235, 1246-1248

Last review: Jan 01, 2019
https://kb.netwrix.com/2482
Copy Article URL Copied

Netwrix Auditor System Health Log contains the following EventID: 1211, 1215, 1226, 1227, 1228, 1229, 1230, 1231, 1232, 1233, 1234, 1235, 1246, 1247, 1248.​


1211 An unexpected error occurred while updating the security cache.
  • The Data Processing Account has insufficient rights to access: %ProgramData%\Netwrix Auditor\Data\Netwrix Auditor for SharePoint\Configuration\<Monitoring plan GUID> folder.
  • The data located in this folder is corrupted or locked by another process.
  • Unexpected error occurred.
1215 Unable to delete temporary files when writing audit data to the SQL database due to the following error.
1226 The following error occurred when trying to compare the configuration snapshots.
1227 Unable to copy file <fileName> to the Audit Archive.
1228 Unable to copy audit data to the Audit Archive.
1229 Unable to save the configuration snapshot to the Audit Archive due to the following…
1230 Unable to delete temporary file <file name>.
1231 The following unexpected error occurred when trying to delete temporary files from the local repository.
1232 The following unexpected error occurred when trying to generate a zip archive with audit data to be copied to the Audit Archive.
1233 The following error occurred when trying to delete old audit data from the local repository.
1234 Unable to load cache for SharePoint <groups/roles> due to the following error: <errormsg>.
1235 Unable to save <groups/roles> cache to the local repository.
1246 Unable to delete the following zip archive <file name> with old audit data from the local repository.
1247 The following error occurred when trying to read audit data from the repository: <errormsg>.This data will be skipped.
1248 Unable to parse an event due to the following error message: <errormsg>.This event will be skipped.

  • Grant your Data Processing Account the access permission to <Monitoring Plan name> folder. Navigate to %ProgramData%\Netwrix Auditor\Data\Netwrix Auditor for SharePoint\Configuration\<Monitoring plan GUID*> folder.
    • *To view your monitoring plan GUID, navigate to %programdata%\Netwrix Auditor\Audit Core\ConfigServer\Configuration.xml. Find your Monitoring Plan name in the configuration file:
-<n n = “ManagedObjects”>

<a n = “Name” t=”2″ v=”your_SharePoint_Monitoring_Plan_name”/>
  • If the error contains a file name, make sure that it is accessible and not locked.
  • Try re-creating your Monitoring Plan
Go Up