Re: How to create SQL Login audit log?

From: Sophie Guo [MSFT] (v-sguo_at_online.microsoft.com)
Date: 07/21/05 

Date: Thu, 21 Jul 2005 02:43:31 GMT

Hello,

User colum is "N/A" in application view of Event Viewer if you log on as a
SQL login. However, double-click the event , you may read the information
looks like the followings in the event properties:

18454 :
Login succeeded for user 'sa'. Connection: Non-Trusted.

18456 :
Login failed for user 'sa'.

or you can find the following information in the SQL logs:

2005-07-20 16:48:10.32 logon Login failed for user 'sa'.
2005-07-20 16:48:14.75 logon Login succeeded for user 'sa'. Connection:
Non-Trusted.

By default, the SQL logs located in the folder "C:\Program Files\Microsoft
SQL Server\MSSQL\LOG".

I hope the information is helpful.

Sophie Guo
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: Getting Challenged when using SQL connection on .aspx page
    ... What would happen if i removed integrated security=sspi from the connection ... Just want the login token to be passed, ... Have webpage with following connection in the ... I have account to the database on the SQL server. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Using OLEDB from ActiveX DLL
    ... But why use ODBC anyway?). ... It is simply a SQL ... Server Login issue. ... The connection string for OLEDB: ...
    (microsoft.public.vb.general.discussion)
  • Re: SQL.Net connection in VS2005 from local IIS to local SQLExpres
    ... I guess the obvious question would be is there a login defined in SQL Server ... Look at the connection string for the ...
    (microsoft.public.sqlserver.connect)
  • Re: Is there a reliable way to do this?
    ... started when SQL Server starts up? ... right after log-in - there are often login failures reported by ... increased the length of the connection time-out in the connection ... unless the user db's and/or tempdb database is rather large your probably ...
    (microsoft.public.sqlserver.connect)
  • RE: Duplicate Connections
    ... login event is fired when I run the ExecuteReader command. ... actual query runs on the original login connection. ... > and only a single SPID as shown in SQL Server Ent Mgr's Current Activity ... > string sSql = "SELECT CategoryID, CategoryName FROM Categories ORDER BY ...
    (microsoft.public.dotnet.framework.adonet)