Audit Data for xxx was not accessible. LOGbinder will try to access it again in the next round.


Audit Data for xxx was not accessible. LOGbinder will try to access it...

lars

Hello,

We have installed LOGbinder on one of the servers in our SharePoint farm, and have configured per the documentation located here (https://support.logbinder.com/LOGbinderforSharePointKB/50014/1-Installing-LOGbinder-For-SharePoint). We have double checked the account permissions and setup. Each time we start the LOGbinder service, multiple 552 Warning Events are generated (see below), and we receive no information in the security log or LOGbndSP log, after trying both of those. We have setup the specified permissions for the service account to write to the SEC log.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System>  <Provider Name="LOGbndSE" />   <EventID Qualifiers="0">552</EventID>   <Level>3</Level>   <Task>1</Task>   <Keywords>0x80000000000000</Keywords>   <TimeCreated SystemTime="2018-02-21T13:31:05.000000000Z" />   <EventRecordID>1015348</EventRecordID>   <Channel>Application</Channel>   <Computer>***FQDN removed***</Computer>   <Security />   </System>- <EventData>  <Data>Audit data for ***URL removed*** was not accessible. LOGbinder will try to access it again in the next round.</Data>   </EventData>  </Event>

We have spent considerable time troubleshooting, and request assistance please. Thank you!

Tamas Lengyel

lars - 2/21/2018
Hello,

We have installed LOGbinder on one of the servers in our SharePoint farm, and have configured per the documentation located here (https://support.logbinder.com/LOGbinderforSharePointKB/50014/1-Installing-LOGbinder-For-SharePoint). We have double checked the account permissions and setup. Each time we start the LOGbinder service, multiple 552 Warning Events are generated (see below), and we receive no information in the security log or LOGbndSP log, after trying both of those. We have setup the specified permissions for the service account to write to the SEC log.

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System>  <Provider Name="LOGbndSE" />   <EventID Qualifiers="0">552</EventID>   <Level>3</Level>   <Task>1</Task>   <Keywords>0x80000000000000</Keywords>   <TimeCreated SystemTime="2018-02-21T13:31:05.000000000Z" />   <EventRecordID>1015348</EventRecordID>   <Channel>Application</Channel>   <Computer>***FQDN removed***</Computer>   <Security />   </System>- <EventData>  <Data>Audit data for ***URL removed*** was not accessible. LOGbinder will try to access it again in the next round.</Data>   </EventData>  </Event>

We have spent considerable time troubleshooting, and request assistance please. Thank you!

Hi,

Sorry about the troubles. It seems LOGbinder is not able to access audit data from the site collection for some reason.

You mentioned that you set account permission, but just confirming that both the user running LOGbinder and the LOGbinder service account are SharePoint farm administrators and the LOGbinder service account it a site collection administrator on the site collection in question.

Could you please turn on diagnostic logging? Go to File / Options, select Level 1 logging. Then restart the service. After the error message comes up again, go to the "C:\ProgramData\LOGbinder SP" folder, compress and send to me in a private message all *.log files. You can sanitize the logs as necessary.

Thanks,
Tamas

GO


Similar Topics


Reading This Topic


Login
Existing Account
Email Address:


Password:


Select a Forum....








LOGbinder Forum


Search