SharePoint Audit Log Event ID 52
52: Information management policy created
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
The collection set (information management policy) that governs content has been created. Expiration, auditing, document labels, and bar codes are examples of content management. This event is always audited and not connected with any audit flag.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Object
- Type: may be list, list item, document, folder, or web site
- Subtype:
- URL: URL of the object targeted by this operation
- Title: title of the object targeted by this operation
- Description: The description that appears on the page
- Policy Details: Data connected with the policy
Supercharger Free Edition
Supercharger's built-in Xpath filters leave the noise behind.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Information management policy created
Occurred: 11/21/2011 3:15:28 PM
Site: http://sp2010-sp
User: System Account
Object
Type: List
Subtype: Generic List
URL: /Lists/Tasks/AllItems.aspx
Title: Tasks
Description: Use the Tasks list to keep track of work that you or your team needs to complete.
Policy details: <data ContentTypeId="0x01080030F71437AD53BC458A9F8A6F248E9D21" ContentTypeName="Task"><p:Policy xmlns:p="office.server.policy" id="" local="true" /></data>
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection