Re: audit

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 03/29/04


Date: Mon, 29 Mar 2004 10:31:32 -0700

If you want a subset of what you get with C2 auditing, you
can create a SQL Profiler trace that will capture what you
want. C2 auditing is comprised of classes and events
available to you when using Profiler. Look at the Security
Audit event classes when defining a trace in Profiler.

-Sue

On Mon, 29 Mar 2004 09:14:19 -0800, "MB"
<anonymous@discussions.microsoft.com> wrote:

>Hi,
> I want to audit the log-on attempts and record with
>another information (login, user, NTusername, date,
>hostname, etc.)
> We reviewed Audit level but errorlog only sent the login
>used, C2 gave me a lot of information buy I only want a
>subset of it.
>
> Do you know how can I get this kind of information?
> Do exist another tool to help me to get this information?
>
>Thanks



Relevant Pages

  • Re: How to know which tables is updated ?
    ... You could use profiler to audit certain types of activity & subsequently see what activity has occured through time. ... You could use triggers &/or default values to maintain a list of who & when records are added. ... is there any utility in Sql Server 2000 or any kind of third party tool available? ...
    (microsoft.public.sqlserver.server)
  • Re: c2 audit ,about hostname coloum value
    ... There is no data column named Host IP address in profiler, ... data columns for C2 Audit option. ... you cant change the directory. ... > Sql Profiler can read audit file which have a colum called HostName record> the computer name of source Computer. ...
    (microsoft.public.sqlserver.security)
  • Re: Auditing
    ... You don't need profiler for this. ... Auditing can be turned on in Enterprise ... Right click the server and then select the security tab. ... If you want to use profiler then create a stored procedure to start it and ...
    (microsoft.public.sqlserver.security)
  • Frage zu SQL Profiler
    ... Verbindung zum MSSQL-Server her und schließe diese gleich wieder über ... Dieses habe ich mir mit dem Profiler mal angesehen und es ergibt sich für ... warum beim Aufruf der Verbindung im Profiler "Audit Login ... "Audit Logout ...". ...
    (microsoft.public.de.sqlserver)