Skip to main content

Event ID 1249 in Health Log

Symptoms

One of the following error messages under Event ID 1249 is prompted in the Health Log for your SharePoint monitoring plan:

The following error occurred when trying to write audit data to the SQL database:
The database is unreachable.
The following error occurred when trying to write audit data to the SQL database:
Data Processing Account has insufficient permissions to write data to the database.

Causes

  1. The Audit Database is unreachable.
  2. The Audit Database account has insufficient permissions to write data to the database.

Resolutions

  • Cause #1 − Verify the SQL Server instance is reachable and the database is accessible.

    1. Open Command Prompt. Ping the SQL server the audit data is stored:

      ping %SQL_server_IP_or_fqdn%
    2. In the SQL server, start SQL Server Management Studio, connect to the instance, and make sure the Audit Database exists.

      NOTE: To establish the name of the Audit Database, click Edit settings in the monitoring plan view > review the database name in the Audit Database tab.

  • Cause #2 − Verify the Data Collecting Account has the correct permissions to write to the Audit Database. Refer to the following article for additional information: https://docs.netwrix.com/docs/auditor/10_8 Database − Configure Default SQL Server Settings · v10.6).