Re: External logs collection and monitoring
From: Jasper Smith (jasper_smith9_at_hotmail.com)
Date: 11/29/04
- Next message: Jasper Smith: "Re: sql icon disappear from sys tray and getting SQL-DMO 80040005 erro"
- Previous message: Scott Shearer: "Ownership Chain Issue"
- In reply to: JMBickham: "External logs collection and monitoring"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Nov 2004 18:22:57 -0000
Server side traces (i.e. without using the Profiler GUI) can only write to
trace files. You can load trace files into a sql table (for example on a
central "audit" server) using the sytem function fn_trace_gettable. See BOL
for details
-- HTH Jasper Smith (SQL Server MVP) http://www.sqldbatips.com I support PASS - the definitive, global community for SQL Server professionals - http://www.sqlpass.org "JMBickham" <JMBickham@discussions.microsoft.com> wrote in message news:AF4060D6-6986-4999-85E3-5B090EC39A53@microsoft.com... > Essentially I am looking for a way to externally store db > audit logs and to be able to parse the data or filter for specific events > and > ids for review by a security team. Something less manual than copying > trace > files from the server to another server and going over each using profiler > (we're talking about 30 servers here!)... but not necessarily as hands-off > as > flagging and email alerting only. > > In going through support docs and threads here a couple questions have > also > arisen... > > Does the table the trace dumps to have to be part of the local db? Is it > possible to have the trace dump to an external db server? > > In order to have trace dump the output to a table, does this require > setting > up a job using SQL Trace stored procedures or can it be done just by > changing > the server's auditing configuration?
- Next message: Jasper Smith: "Re: sql icon disappear from sys tray and getting SQL-DMO 80040005 erro"
- Previous message: Scott Shearer: "Ownership Chain Issue"
- In reply to: JMBickham: "External logs collection and monitoring"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|