Re: Audit trail for web application

From: bradley (someone_at_microsoft.com)
Date: 06/21/05


Date: Tue, 21 Jun 2005 10:17:27 -0400

Auditing SQL Server Activity:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_security_2ard.asp

Monitoring with SQL Profiler:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adminsql/ad_mon_perf_86ib.asp

"Parag" <parag_kulkarni@persistent.co.in> wrote in message
news:OQ75FcmdFHA.2212@TK2MSFTNGP14.phx.gbl...
> Hi,
> Thanks for the reply. Can you please tell me what are the best
practices
> that are followed in web application in .NET to implement the Audit trail
?
> Is there any other way to implement it? It will be of greate help to me if
> you could just point out what are the best practices to implement audit
> trails for web applications.
>
> Regards,
> Parag
>
> "bradley" <someone@microsoft.com> wrote in message
> news:uKZVq7ldFHA.1504@TK2MSFTNGP15.phx.gbl...
> > This is more of a SQL Server question than an ASP.NET question. The
> > problem
> > with implenting auditing at the application level or using table
triggers
> > is
> > that it is very programming intensive and difficult to cover every point
> > of
> > database entry. Every time the data model changes, you would need to go
> > back
> > and revise the audit programming. Go to MSDN and read up on SQL Server
> > Profiler. It can trap various events and output the log to a SQL Server
> > table. There are also 3rd party database auditing tools that should do
> > exactly what you need.
> >
> > "Parag" <parag_kulkarni@persistent.co.in> wrote in message
> > news:OR4rFsidFHA.1456@TK2MSFTNGP15.phx.gbl...
> >> Hello,
> >> I have been assigned the task to design the audit trail for the ASP.NET
> > web
> >> application. I don't know what the best practices for such audit trails
> > are.
> >> Our application one dedicated user name and password to perform the
> > database
> >> operations. I need to capture all the operations which are performed on
> > the
> >> database. Also I need to able to capture the operations which directly
> >> performed on the backend directly using the tools like enterprise
> >> manager,
> >> query analyzer, etc. And also the data for the action should be
captured
> > in
> >> some set of tables, but not in the form of BLOB, so that if the admin
> >> want
> >> to know what are the various things the user did during the particular
> >> session then that should be reproduced in the form of report. Does any
> >> anybody have any idea of how to do such task? Any tips will be helpful.
> >>
> >> I am trying one approach with the help of triggers. But the problem
with
> >> this approach is that I am not able to store all the information need
to
> >> reproduce the same output if I try to generate report for the
particular
> >> session.
> >>
> >>
> >>
> >> Thanks and Regards,
> >> Parag Kulkarni,
> >> India
> >> Email parag_kulkarni@persistent.co.in
> >>
> >>
> >>
> >
> >
>
>



Relevant Pages

  • Re: Connet to SQL Server?
    ... illustrate or show examples of bad practices. ... William (Bill) Vaughn ... > "William Vaughn" wrote: ... >>>I am a newbie to both .Net and Sql Server and I am trying to access the ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: SQL Server Standards Documentation
    ... >> The purpose of this document is to outline SQL Server standards and best ... These standards and best practices will be used ... >> will allow the DBAs to respond more quickly and proactively. ...
    (microsoft.public.sqlserver.server)
  • Re: To saga
    ... Use ADO when accessing a client/server (c/s) DB, like SQL Server. ... To make the app flexible, use catalogs for attributes that can vary. ... One thing is to have best practices for ...
    (microsoft.public.vb.general.discussion)
  • RE: MS SQL Data Warehousing and Oracle
    ... It is filled with best practices and things to ... think about when pulling data from Oracle databases for use in SQL Server. ... If you ever decide to migrate from Oracle to SQL Server you should check out ...
    (microsoft.public.sqlserver.datawarehouse)
  • Re: SQL Server Framework
    ... While I doubt that there is any truly detailed online & public SQL Server ... 2000 "Framework", but if you're looking for a very good resource, I'd ... recommend Kalen Delaney's "Inside Microsoft SQL Server 2000" book as a good ... If what you're looking for is more of a "best practices", ...
    (microsoft.public.sqlserver.fulltext)