Configuring Microsoft SharePoint audit events

The audit settings for Microsoft SharePoint give you the option to define what events are tracked for each site that is managed by Microsoft SharePoint.

1. Log in to your Microsoft SharePoint site.
2. From the Site Actions list, select Site Settings.
3. From the Site Collection Administration list, click Site collection audit settings.
4. From the Documents and Items section, select a check box for each document and item audit event you want to audit.
5. From the Lists, Libraries, and Sites section, select a check box for each content audit event you want to enable.
6. Click OK.

What to do next

Create a database view for IBM QRadar to poll Microsoft SharePoint events.