December 18, 2003 at 5:20 am
Hi friends, anybody can tell me where I could find documentation to do this procedure ? sorry for the basic-nature of my question but I don´t know much about SQL, my expertise is Infrastructure and OS.
December 18, 2003 at 7:08 am
What are you trying to audit? Just logins? Queries as well? Changes in data?
K. Brian Kelley, GSEC
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
K. Brian Kelley
@kbriankelley
December 18, 2003 at 8:25 am
thank you for your reply,
I need to audit anything that you mention
Logins, Queries and changes
thank you again
December 18, 2003 at 8:58 am
All of this is SQL 7.0, someone else will have to comment on SQL 6.5 as I no longer have the docs or a working install.
Look at Books Online for the trace stored procedures. You can get used to what these will do by using Profiler. This will allow you to audit queries.
To audit logins, you can set SQL Server to record login failures (and successes if you want). In EM, right-click on your SQL Server and choose properties. Then click on the Security tab. Set the audit value you want, then stop and restart SQL Server. It should write the audit records in the Application Event Log for the system.
For changes in data, you'll probably need to look at putting triggers on table (in order to record before and after). There are 3rd party products that can do this for you.
K. Brian Kelley, GSEC
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
K. Brian Kelley
@kbriankelley
December 18, 2003 at 8:59 am
Profiler and the trace stored procedures can also be used to audit logins. I omitted that.
K. Brian Kelley, GSEC
http://www.truthsolutions.com/
Author: Start to Finish Guide to SQL Server Performance Monitoring
K. Brian Kelley
@kbriankelley
December 18, 2003 at 10:48 am
Brian, thank you so much for your advice.
Just Now I work with Profiler to test an audit configuration, Thank You Again
Claudio
Viewing 6 posts - 1 through 5 (of 5 total)
You must be logged in to reply to this topic. Login to reply