February 23, 2018 at 1:02 am
For reading audit files for reporting Failed login attempts .
Need the connection event info including instance_name, database_name, client IP etc, store in table . as the audit logs are going to be recycled
Currently tried two approaches
a. fn_get_audit_file
b. xp_readerrorlog
Both are giving different number of rows in result.
Which is preferred. Have SQL Server 2008 R2 and SQL Server 2012
DBA's need you advice on this.
February 26, 2018 at 4:02 pm
shannu_anand - Friday, February 23, 2018 1:02 AMFor reading audit files for reporting Failed login attempts .
Need the connection event info including instance_name, database_name, client IP etc, store in table . as the audit logs are going to be recycled
Currently tried two approaches
a. fn_get_audit_file
b. xp_readerrorlog
Both are giving different number of rows in result.
Which is preferred. Have SQL Server 2008 R2 and SQL Server 2012DBA's need you advice on this.
They wouldn't be different number incidents of login failure between the two so possibly how you are querying or how you set up the audit.
The preferred would be the one that gives you the information you need. It doesn't sound like the logging the failures to the error log has everything you want to capture
Sue
November 19, 2018 at 5:11 am
I just applied the wrong password for SSH and it doesn't appear in the log. Nonetheless, cPanel shows up, conceded logins show up, and web mail... That is all I find in my logs, there might be more. So I cannot check what is the problem there with my login errors for now.
write my essay
November 19, 2018 at 9:40 am
What's the code you tried to do these?
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply