SharePoint 2019 OnPrem Site Collection Audit Settings

TN 101 Reputation points
2021-04-19T15:46:56.53+00:00

I had some questions regarding SP 2019 OnPrem site collection audit settings:

  1. Where is Audit report data stored? Is it on Database? If yes, what are database name?
  2. When you specify No for "Automatically trim the audit log for this site? ", will audit report keep indefinitely?

Thanks
Tee

Microsoft 365 and Office | SharePoint Server | For business
0 comments No comments
{count} votes

Accepted answer
  1. JoyZ 18,111 Reputation points
    2021-04-20T02:17:41.223+00:00

    Hi @TN ,

    To answer your questions:

    1. SharePoint audit logs data are stored on the AuditData table inside the content database of the site collection. You need to be careful which events you track and how you configure the audit log trimming to avoid using excessive disk space for audit logs.
    2. No, the default setting for retaining audit log data is zero days. That means if you don't specify a different retention period, all audit log entries are deleted at the end of the month.

    In addtion, we can also specify the document library to save audit log reports to before the audit log data is trimmed. Set this option if you need access to audit log data, using audit log reports, after the audit log has been trimmed.

    The audit log reports can be stored in the document library indefinitely.

    More information for your reference:

    https://support.microsoft.com/en-us/office/configure-audit-data-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2#ID0EAADAAA=SharePoint_Server_2019,_2016,_2013


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.