Skip to main content

Event ID 1287 in Health Log

Symptom

The following error message under Event ID 1287 is prompted in Health Log for your SharePoint monitoring plan:

Audit settings for read access events in site collection %item_ID% are not configured properly. As a result, some read access events may be lost.

Cause

The opening or downloading documents, viewing items and lists, or viewing item properties audit is disabled for the site collection.

Resolution

  1. In the affected site collection, navigate to Site Settings > Site Collection Administration > Site Collection Audit Settings.
  2. Check the Opening or downloading documents, viewing items and lists, or viewing item properties checkbox under the Documents and Items section. Save the changes.
  3. Update the monitoring plan − select the affected monitoring plan, click Edit, and click Update in the right pane.

NOTE: Verify the audit settings are set to be adjusted automatically − in the SharePoint monitoring plan, click Edit data source and check the Configure audit settings checkbox. Save the changes.