locked
Error when running Audit Log Report RRS feed

  • Question

  • Setting up Audit Log Reports and getting this error when I try to execute the report.  Can you translate it for me?

    Correlation ID: 938c0e30-5926-4674-8bfa-993b9e746aa5

    Monday, December 9, 2013 10:40 PM

Answers

All replies

  • if you have access to sharepoint server or ask your Sharepoint administrator to get the complete trace using the correlation id.

    run this command

    Merge-SPLogFile -correlation "938c0e30-5926-4674-8bfa-993b9e746aa5" -Path "C:\error.log"


    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

    Monday, December 9, 2013 10:58 PM
  • Results from error log.

    Timestamp                         Process                                                TID         Area                                      Category                              EventID                Level                     Message              Correlation

    12/09/2013 15:35:48.36 w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Logging Correlation Data      xmnv     Medium               Name=Request (POST:http://community.bankrateinsurance.com:80/_layouts/CustomizeReport.aspx?ReportId=3b45a49b-3242-4fd7-bf1a-1539d0447e82&Category=Auditing)              938c0e30-5926-4674-8bfa-993b9e746aa5

    12/09/2013 15:35:48.38 w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Logging Correlation Data      xmnv     Medium               Site=/    938c0e30-5926-4674-8bfa-993b9e746aa5

    12/09/2013 15:35:48.44 w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Monitoring                                    b4ly        High       Leaving Monitored Scope (EnsureListItemsData). Execution Time=28.409880752926        938c0e30-5926-4674-8bfa-993b9e746aa5

    12/09/2013 15:35:48.46 w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Runtime                                       tkau       Unexpected       System.FormatException: Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).    at System.Guid..ctor(String g)     at Microsoft.SharePoint.Publishing.Internal.WebControls.ObjectSerializer.GetIdsFromSerializedId(String serializedId, Guid& listId, Guid& webId)     at Microsoft.Office.RecordsManagement.Reporting.ApplicationPages.AuditCustomQuery.GetListFromControls(Guid& webId, Guid& listId)     at Microsoft.Office.RecordsManagement.Reporting.ApplicationPages.AuditCustomQuery.GetQueryFromControls(Hashtable htResult)     at Microsoft.Office.RecordsManagement.Reporting.ApplicationPages.AuditCustomQuery.get_Query()     at Microsoft.Office.RecordsManagement.Reporting.ApplicationPages.CustomizeReport.OKBtn_Click(Object sender, EventArgs e)     at System.Web.UI.WebCon...     938c0e30-5926-4674-8bfa-993b9e746aa5

    12/09/2013 15:35:48.46*               w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Runtime                                       tkau       Unexpected       ...trols.Button.OnClick(EventArgs e)     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)     at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) 938c0e30-5926-4674-8bfa-993b9e746aa5

    12/09/2013 15:35:48.46 w3wp.exe (BPUTIL0041:0x28D38)           0xDD98 SharePoint Foundation                 Monitoring                                    b4ly        Medium               Leaving Monitored Scope (Request (POST:http://community.bankrateinsurance.com:80/_layouts/CustomizeReport.aspx?ReportId=3b45a49b-3242-4fd7-bf1a-1539d0447e82&Category=Auditing)). Execution Time=106.668366183773    938c0e30-5926-4674-8bfa-993b9e746aa5

    Monday, December 9, 2013 11:27 PM
  • below error telling me something wrong on the page(may be something corrupt). do you have publication feature activated on the site, try to deactivate and reactivate it. 

    Unexpected       System.FormatException: Guid should contain 32 digits with 4 dashes (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx).


    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

    Tuesday, December 10, 2013 3:02 AM
  • Hi Bonhamk, which patch level of SharePoint Foundation are you running?

    Dimitri Ayrapetov (MCSE: SharePoint)

    Tuesday, December 10, 2013 3:10 AM
  • I believe this is the information that you are asking about.

    Farm Information

    Configuration database version:

    14.0.6029.1000

    • Marked as answer by bonhamk Tuesday, December 10, 2013 8:10 PM
    Tuesday, December 10, 2013 7:14 PM
  • are you using SharePoint Foundation or Sharepoint Server?

    if foundation then auditing is not supported. 

    http://sharepoint.stackexchange.com/questions/13399/how-do-we-activate-auditing-in-sharepoint-foundation-2010

    or check this Codeplex solution if you are on Foundation:

    http://auditlogsp.codeplex.com/


    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog


    • Edited by Waqas Sarwar(MVP) Tuesday, December 10, 2013 7:22 PM
    • Marked as answer by bonhamk Tuesday, December 10, 2013 8:10 PM
    Tuesday, December 10, 2013 7:20 PM
  • We are using the Full Version of Sharepoint Server.
    Tuesday, December 10, 2013 8:10 PM
  • Build 14.0.6029.1000 is SP1, which is over 2 years old at this point. I would recommend upgrading to SP2 and then checking if your problem with the Audit Reports still exist. http://technet.microsoft.com/en-us/sharepoint/ff800847.aspx

    Dimitri Ayrapetov (MCSE: SharePoint)

    Tuesday, December 10, 2013 11:56 PM
  • I had the same problem and figured out that I was passing the wrong parameters to the server.  Under Restrict this report to, I had selected the site instead of a specific document library.  Once I selected the document library, the report ran as expected.
    Wednesday, September 10, 2014 10:47 PM