Re: C2 SQL auditing

I don't have a specific recomendation as the SOX requirements are very loose
and open to interpitation. There are a number of 3rd party tools that
monitor the logs.

http://sqlserver2000.databases.aspfaq.com/how-do-i-audit-changes-to-sql-server-data.html
http://sqlserver2000.databases.aspfaq.com/how-do-i-recover-data-from-sql-server-s-log-files.html


--
Andrew J. Kelly SQL MVP

"SQL apprentice" <mssqlworld@xxxxxxxxx> wrote in message
news:ufl7fZpVHHA.1636@xxxxxxxxxxxxxxxxxxxxxxx
Hi Andrew,

I had to setup C2 for my company just so they can see it in their own
eyes.
I recommended them to use Server Side trace, it is more efficiency and
customizable to what they want to audit.
It would make my case even better when I tell them 3 SQL MVPs suggest not
to
use C2.

Do you suggest any third party tools for SOX compliance? I am testing
Idera
CM right now.
Eventually, I would like to off load the server side trace to the SOX team
since there are over 100 SQL Servers.
I would like to setup and manage so many traces.

Thanks again for the input...I greatly appreciated.

"Andrew J. Kelly" <sqlmvpnooospam@xxxxxxxxxxxx> wrote in message
news:OqOIdLiVHHA.3592@xxxxxxxxxxxxxxxxxxxxxxx
Don't use the C2 auditing. Just create a custom trace that collects the
data
you want and you can start and stop it as you need to. Check out
sp_trace_Create in BooksOnLine.

--
Andrew J. Kelly SQL MVP

"SQL apprentice" <mssqlworld@xxxxxxxxx> wrote in message
news:OYlONfeVHHA.3500@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I setup my SQL 2000 Server to use C2 auditing. It is working.
My only problem is that my trace file does not get populated while I am
inserting/updating/select data or anything.
However, when I stop SQL server then my trace file gets populated.
I cannot stop a production SQL server on and off just to collect data
and
the trace file is only limited to 200MB so I can wait till the end of
day.
I am trying to do a audit report every 2hrs.
Am I doing something wrong? Or this is how C2 works?

I would appreciate all the help!








.

Relevant Pages

  • Re: User and Login auditing
    ... I am running SQL 7. ... You could put triggers on your trace table. ... How to Trace in SQL Server by Using Extended Stored ...
    (microsoft.public.sqlserver.security)
  • Re: Tracking user activities
    ... >> I'd like these settings to persist permanently and the event records to ... > In SQL 2000, this is not very simple to do. ... > Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx ... select Script Trace. ...
    (comp.databases.ms-sqlserver)
  • Re: How to look at parameter string
    ... I am tracing, but the problem I can't trace (at least, I haven't figured out ... string it is putting together to send to Sql. ... >> The problem is not coming from Sql Server but from my page. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: SQL logins logged where
    ... you can't trace directly to a table but can use the> fn_trace_gettable function to load the trace file into a> table. ... If you are using SQL Server 7, use> xp_trace_setqueuedestination to set the destination to a> table. ... Security Tab does not give too many ...
    (microsoft.public.sqlserver.security)
  • Re: SQL SOX auditing and logging
    ... I know what you mean...I think I will have to look for a 3rd party logging ... Have you done SOX for SQL? ... trace whenever he wishes, the auditor will not accept that log anyway. ... Erland Sommarskog, SQL Server MVP, esquel@xxxxxxxxxxxxx ...
    (microsoft.public.sqlserver.tools)