Netwrix Auditor Health Log Contains Event ID 1119
Symptom
Netwrix Auditor unable to collect data from a SharePoint farm and the Netwrix Auditor Health Log contains the EventID 1119:
An item with the same key has already been added.
Cause
Invalid format of a SharePoint Central Administration URL is specified in your monitoring plan settings.
Resolution
Provide the URL for your SharePoint farm (Central Administration) in the FQDN format. For that:
- In Netwrix Auditor, navigate to Monitoring Plans.
- Select your SharePoint monitoring plan.
- Click Edit Item on the right.
- On the General tab, provide the Central Administration address in the FQDN format (e.g.,
http://sharepointserver.local:8080). - Save your edits.
- On the Netwrix Auditor server host, open the Services snap-in and make sure that the Netwrix Auditor for SharePoint Audit Service is running.