Netwrix Auditor System Health Log contains the following Event ID: 1206
“Netwrix Auditor for SharePoint Core Service cannot be found”.
This can be due to one of the following reasons:
- The manual Core Service installation mode has been selected on monitoring plan creation, and the Netwrix Auditor for SharePoint Core Service cannot be found on the computer where SharePoint Central Administration is installed.
- The manual Core Service installation mode has been selected but wrong SharePoint Central Administration URL was specified when creating a monitoring plan.
Do one of the following:
- If manual installation mode was selected, check that you have specified a valid SharePoint Central Administration URL.
- Install Netwrix Auditor for SharePoint Core Service manually. For detailed instructions refer to Netwrix Auditor Online Help Center: https://helpcenter.netwrix.com/Installation/Install_Core_Service_SharePoint.html
Note: After the successful manual installation, the error will persist until the next scheduled data collection. Navigate to SharePoint monitoring plan, select Edit and click Update on the right pane to start the collection manually.