Skip to main content

Netwrix Auditor Health Log Contains Event ID 1119

Symptom

Netwrix Auditor unable to collect data from a SharePoint farm and the Netwrix Auditor Health Log contains the EventID 1119:

An item with the same key has already been added. 

Cause

Invalid format of a SharePoint Central Administration URL is specified in your monitoring plan settings.

Resolution

Provide the URL for your SharePoint farm (Central Administration) in the FQDN format. For that:

  1. In Netwrix Auditor, navigate to Monitoring Plans.
  2. Select your SharePoint monitoring plan.
  3. Click Edit Item on the right.
  4. On the General tab, provide the Central Administration address in the FQDN format (e.g., http://sharepointserver.local:8080).
  5. Save your edits.
  6. On the Netwrix Auditor server host, open the Services snap-in and make sure that the Netwrix Auditor for SharePoint Audit Service is running.