InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comWed, 19 Jun 2013 21:28:23 GMT20http://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxWho is also shown. If you look at the first http://www.sqlservercentral.com/Images/14239.jpgyou will session_server_principal_name which will show the user nameThu, 31 May 2012 14:57:21 GMTRoy Ernesthttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxHi, Very nice article. So am i right in saying this form of auditing only answers the "when" and not the "who", I saw session Id but unless your constantly recording whose using the session Id that doesn't tell you anything? Thu, 31 May 2012 13:51:21 GMTn00bDBAhttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxNoted. Thanks for the article.Thu, 31 May 2012 13:31:03 GMTjfogelhttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxYes it is. The behavior changes even for different level of Service packs unfortunately.Thu, 31 May 2012 13:22:40 GMTRoy Ernesthttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxUPDATE [dbo].[tbProducts] set [ProductCost] = @1 WHERE [ProductID]=@2For my test using 2008 R2 I actually got the values used in the update statement and not variables. I got:update dbo.tbProducts Set ProductCost = 2750 where ProductID = 1 Is this a 2008 vs R2 thing?Thu, 31 May 2012 11:58:31 GMTjfogelhttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxBeginner2008, Thx. You gave me an idea for the next article. I will try to do one regarding capturing the auditing data and writing it to a Table.Thu, 31 May 2012 07:08:24 GMTRoy Ernesthttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxHi Computrion, Thx for links. Yes, I noticed that the SQL Audit does not catch all the values.Thu, 31 May 2012 07:06:24 GMTRoy Ernesthttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspx[quote][b]bmcateer (5/31/2012)[/b][hr]You have a typo in your code: "WriteToApllicationLog" ;-)[/quote]Thx for pointing it out. :-) Next time I will be more careful. :-)Thu, 31 May 2012 07:04:18 GMTRoy Ernesthttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxCan you please also make an article how to take the sql audit logs to a sql table using ssis/whichever way is easier?Thanks.Thu, 31 May 2012 06:00:55 GMTAchilieshttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxVery nice feature and article, this will full fill so many cases but for some real auditing this needs to be get more matured.I have two informations to share here, one is good and the other one is bad.first the good one.SQLCat has build some code to collect audited data, which can be modified as per need.http://sqlcat.codeplex.com/wikipage?title=sqlauditcentral&referringTitle=Homesecondly the bad thing.We have some limitations of seeing parameterized value, sometimes (in my case most of the time) SQL audit is unable to capture the actual value, which was passes using variable to stored procedure or sql query.https://connect.microsoft.com/SQLServer/feedback/details/624935/sql-server-2008-database-audit-on-insert-update-and-delete-actual-sql-and-not-parameter-valuesBye.Thu, 31 May 2012 05:49:38 GMTcomputrionhttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxYou have a typo in your code: "WriteToApllicationLog" ;-)Thu, 31 May 2012 05:13:05 GMTbmcateerhttp://www.sqlservercentral.com/Forums/Topic1308755-1188-1.aspxComments posted to this topic are about the item [B]<A HREF="/articles/Auditing/90178/">What, when and who? Auditing 101 - Part 3</A>[/B]Thu, 31 May 2012 00:07:18 GMTRoy Ernest