Skip to main content

Event ID 1236 in Health Log

Symptom​

The following error message under Event ID 1236 is prompted in Health Log for your SharePoint monitoring plan:

Unable to parse the following event: %event_data%. Skip this event.

Cause​

Netwrix Auditor was unable to parse changes in a target site collection due to the Locked — No Access status.

Resolution​

  1. In SharePoint Central Administration, navigate to Application Management > Configure Quotas and Locks > %affected_web_application%.
  2. Change the status to Not locked.

Learn more on management of the SharePoint site lock status via PowerShell in Manage Lock Status for Site Collections in SharePoint Server − Manage Lock Status for Site Collection via Microsoft PowerShell ⸱ Microsoft 🡥.