SharePoint 2013 - >审核日志报告,未显示“删除或恢复项目” [英] SharePoint 2013 --> Audit Log Report, not showing "Deleting or restoring items"

查看:95
本文介绍了SharePoint 2013 - >审核日志报告,未显示“删除或恢复项目”的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

在SharePoint 2013网站设置中 - >审核日志报告 - >运行自定义报告 - >活动 - >我已检查(已选中)删除或恢复项目但在运行报告后未显示任何记录,但在此特定
日期删除了某些项目。



我可以在"打开或下载文档,查看列表中的项目或查看项目属性"中查看数据。但是"删除或恢复项目"没有给出结果,请建议。


谢谢

解决方案

最好的选择是拿一个备份您的内容数据库并将其还原到其他位置。查询EventCache表中的项目。替换"测试"一词使用部分或完整的项目名称。



从eventcache(nolock)中选择*,其中ItemFullUrl类似'%test%',EventType = 16388,按TimeLastModified desc命令



这将为您提供删除项目和删除项目的时间。



$
https://social.technet.microsoft.com/Forums/lync/en-US/b2801280-0053-45f1-bca7-a8edfb39ab8a/sharepoint-detect-delete-event-in-default-logs?forum=sharepointgeneral





同时检查 


https: //community.spiceworks.com/how_to/126012-how-to-track-changes-on-sharepoint-server-2013


In SharePoint 2013 Site Setting --> Audit Log Report --> Run a Custom Report --> Events --> I've checked (Selected) Deleting or Restoring item but after running the report its not showing any records however some item deleted on this particular date.

I can able to see the data in "Opening or downloading documents, viewing items in lists, or viewing item properties" but "Deleting or restoring items" not giving the result, please advice.

Thanks

解决方案

Best bet is to take a backup of your Content Database and restore it elsewhere. Query the EventCache table for the item. Replace the word "test" with the partial or complete item name.

select * from eventcache (nolock) where ItemFullUrl like '%test%' and EventType = 16388 order by TimeLastModified desc

This will provide you with the time the item is deleted and who deleted it.


https://social.technet.microsoft.com/Forums/lync/en-US/b2801280-0053-45f1-bca7-a8edfb39ab8a/sharepoint-detect-delete-event-in-default-logs?forum=sharepointgeneral


Also check 

https://community.spiceworks.com/how_to/126012-how-to-track-changes-on-sharepoint-server-2013


这篇关于SharePoint 2013 - >审核日志报告,未显示“删除或恢复项目”的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
相关文章
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆