SharePoint Audit Log Event ID 37

SourceSharePoint (LOGbinder SP)
Audit FlagSecurityChange
Windows Security Log
 • Subcategory
Object Access
 • Application Generated
Type Success

37: SharePoint site collection administrator added

This is an event from SharePoint audit event from LOGbinder SP generated by Audit Flag  SecurityChange.

On this page

A member was added to site collection administrators.

Free Security Log Resources by Randy

Description Fields in 37

  • Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
  • Site: This is the URL of the site generating this event
  • User: name of the user who performed the action
  • Administrator
    • ID: Sharepoint ID assigned to site collection administrator
    • Name: Name of site collection administrator

Supercharger Free Edition

Your entire Windows Event Collection environment on a single pane of glass.



Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 37

SharePoint site collection administrator added
Occurred: 11/22/2011 5:22:19 PM
Site: http://sp2010-sp
User: System Account
  ID: 28
  Name: Randy F. Smith

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources