Skip to main content

Event ID 1241 in Health Log

Symptom​

The following error message under Event ID 1241 is prompted in Health Log for your SharePoint monitoring plan:

Audit settings for security events in site collection %item_ID% are not configured properly.
As a result, some read access events may be lost.

Cause​

The Editing users and permissions audit is disabled for the site collection.

Resolution​

  1. In the affected site collection, navigate to Site Settings > Site Collection Administration > Site Collection Audit Settings.
  2. Check the Editing users and permissions checkbox under the Lists, Libraries, and Sites section. Save the changes.
  3. Update the monitoring plan − select the affected monitoring plan, click Edit, and click Update in the right pane.

NOTE: Verify the audit settings are set to be adjusted automatically − in the SharePoint monitoring plan, click Edit data source and check the Configure audit settings checkbox. Save the changes.