Event ID 1287 in Health Log
Symptom
The following error message under Event ID 1287 is prompted in Health Log for your SharePoint monitoring plan:
Audit settings for read access events in site collection %item_ID% are not configured properly. As a result, some read access events may be lost.
Cause
The opening or downloading documents, viewing items and lists, or viewing item properties audit is disabled for the site collection.
Resolution
- In the affected site collection, navigate to Site Settings > Site Collection Administration > Site Collection Audit Settings.
- Check the Opening or downloading documents, viewing items and lists, or viewing item properties checkbox under the Documents and Items section. Save the changes.
- Update the monitoring plan − select the affected monitoring plan, click Edit, and click Update in the right pane.
NOTE: Verify the audit settings are set to be adjusted automatically − in the SharePoint monitoring plan, click Edit data source and check the Configure audit settings checkbox. Save the changes.