Skip to main content

Event ID 1207 in Health Log

Symptom

Your SharePoint monitoring plan prompts the following error message under Event ID 1207 in Health Log:

Automatic Netwrix Auditor for SharePoint Core Service deployment failed.

Cause

The Netwrix Auditor for SharePoint Core Service version is different from the current Netwrix Auditor server version.

Resolution

  1. Manually uninstall the Netwrix Auditor for SharePoint Core Service from the server hosting SharePoint Central Administration.
  2. The Netwrix Auditor server automatically detects the missing core service and installs it on target servers.
  3. To manually install the SharePoint Core Service, refer to the following article: Installation — Install for SharePoint Core Service · v10.6.
  • Installation — Install for SharePoint Core Service · v10.6