SharePoint Solution
The core components for Netwrix Enterprise Auditor are the Enterprise Auditor Console server, SQL Server, and Access Information Center. See the Requirements topic for the core requirements.
You can configure the SharePoint solution to run without an agent or to use the Enterprise Auditor SharePoint Agent. See the SharePoint Agent Installation topic for additional information.
In addition, scanning event activity data requires integration with the Netwrix Activity Monitor. See the Netwrix Activity Monitor Documentation for installation requirements and information on collecting activity data.
For Activity Auditing (SPAC) scans, retain the audit logs generated by SharePoint for more days than the number of days between the Enterprise Auditor scans.
When configuring the Netwrix Activity Monitor, select all events to be monitored in both the Documents and Items section and the List, Libraries, and Site section.
Install the Sensitive Data Discovery Add-On on the Enterprise Auditor Console server to enable Sensitive Data criteria for scans.
If you use the Enterprise Auditor SharePoint Agent scan option, also install the Sensitive Data Discovery Add-On on the servers.
See the following topics for the SharePoint Agent and the target environment requirements:
You can use the SP_RegisterAzureAppAuth instant job to make the configuration for SharePoint Online easier. This job registers the necessary Microsoft Entra ID application and provisions it with the required permissions. See the SP_RegisterAzureAppAuth Job topic for additional information.
SharePoint Solution Requirements on the Enterprise Auditor Console
RAM, CPU, and Disk Space
These depend on the size of the target environment:
| Environment | Extra-Large | Large | Medium | Small |
|---|---|---|---|---|
| Definition | ~5,000 Site Collections or 5+ TB of managed data | ~2,500 Site Collections or 1-5 TB of managed data | ~1,000 Site Collections or 500 GB of managed data | ~100 Site Collections or 100 GB of managed data |
| RAM | 24 GB | 16 GB | 12 GB | 4 GB |
| Cores | 8 CPU | 8 CPU | 4 CPU | 2 CPU |
| Disk Space | 460 GB | 280 GB | 160 GB | 80 GB |
If you run Sensitive Data Discovery (SDD) scans, increase the minimum amount of RAM. Each thread requires a minimum of 2 additional GB of RAM per host. For example, if you configure the job to scan 8 hosts at a time, it requires an extra 16 GB of RAM (8 x 2 = 16).
Sensitive Data Discovery Auditing Requirement
The following is required to run Sensitive Data Discovery scans:
- Sensitive Data Discovery Add-On installed on the Enterprise Auditor Console server
The Sensitive Data Discovery Add-on installation package installs the appropriate JDK (Java) version on the server. The JDK deployed is prepackaged and doesn't require any configuration. The package preconfigures it to work with Enterprise Auditor, so never customize it through Java. It doesn't conflict with other JDKs or Java Runtimes in the same environment.
SharePoint Solution Requirements on the SQL Server
RAM, CPU, and Disk Space
These depend on the size of the target environment.
| Environment | Extra-Large | Large | Medium | Small |
|---|---|---|---|---|
| Definition | ~5,000 Site Collections or 5+ TB of managed data | ~2,500 Site Collections or 1-5 TB of managed data | ~1,000 Site Collections or 500 GB of managed data | ~100 Site Collections or 100 GB of managed data |
| RAM | 64 GB | 32 GB | 16 GB | 8 GB |
| Cores | 16 CPU | 12 CPU | 8 CPU | 4 CPU |
| Number of Disks | 4 | 4 | 4 | 4 |
| Operating System Disk | 160 GB | 160 GB | 160 GB | 160 GB |
| SQL Database Disk | 500 GB | 320 GB | 240 GB | 100 GB |
| SQL Transaction Log Disk | 120 GB | 100 GB | 80 GB | 40 GB |
| SQL TEMP DB Disk | 320 GB | 240 GB | 160 GB | 80 GB |