|
|
|
SSC-Enthusiastic
 
Group: General Forum Members
Last Login: Thursday, December 31, 2009 10:33 AM
Points: 189,
Visits: 144
|
|
msbasssinger (6/11/2008)
Yes. I grabbed the wrong audit article. My bad, and my apologies.
Time to revist the coffee pot. :)
No worries. Make me one too pls! :)
|
|
|
|
|
SSC Rookie
Group: General Forum Members
Last Login: Friday, February 05, 2010 8:20 AM
Points: 35,
Visits: 76
|
|
for a simple solution (that's also Sarbanes-Oxley compatible)
check out:
http://www.nobhillsoft.com/Randolph.aspx
|
|
|
|
|
Forum Newbie
Group: General Forum Members
Last Login: Wednesday, June 11, 2008 12:50 PM
Points: 2,
Visits: 18
|
|
| Note that naming stored procedures starting with "sp_" causes SQL Server to search master for the procedure first, causing cache misses and more expensive name resolution.
|
|
|
|
|
SSCrazy Eights
Group: General Forum Members
Last Login: Today @ 1:03 PM
Points: 8,186,
Visits: 7,971
|
|
|
|
|
|
SSC Rookie
Group: General Forum Members
Last Login: Monday, February 08, 2010 9:18 AM
Points: 34,
Visits: 80
|
|
Why? You have C2 security enablement that does all the work for you to generate traces of everything. You have :fn_trace_gettable to read the traces so you don't have to leave QA or SMS.
Yours was pointless work.
|
|
|
|
|
SSCrazy Eights
Group: General Forum Members
Last Login: Today @ 1:03 PM
Points: 8,186,
Visits: 7,971
|
|
|
|
|
|
Mr or Mrs. 500
Group: General Forum Members
Last Login: Monday, March 15, 2010 4:21 PM
Points: 537,
Visits: 204
|
|
Jack Corbett (6/11/2008)
don_goodman (6/11/2008)
Why? You have C2 security enablement that does all the work for you to generate traces of everything. You have :fn_trace_gettable to read the traces so you don't have to leave QA or SMS.
Yours was pointless work.I think stating that someone's work is pointless is being a little harsh. Especially since C2 auditing is at the server level and audits everything on the server to a pre-determined location. The article outlines how to audit specific events in specific databases to a user-defined location. Why would I want record and then have to sift through every action on the server when all I really need to know about is activity in one database? If you think C2 auditing is a better solution for this specific purpose outlined in the article then take the time to offer something constructive instead of denigrating the work done by others.
Thanks for the support Jack. I agree with what you said. I initially investigated C2 auditing as a solution, but found the level of auditing it was to perform, and some of the drawbacks associated with it too costly for what i wanted. So, this solution is a leaner version of auditing for specific events. With C2 auditing, when its enabled, if you turn off that trace, the default result is the sql server shuts down. The ability to bring down the prod server by stopping a trace was a high risk, with multiple people able to get in and inadvertantly do this. With the system i described, when its disabled, the prod server continues marching along just fine.
In the end, this is one way of solving a specific problem. There are always multiple ways to do tasks, and i hope that people will see some ideas from this that will help them out in their Auditing and Compliance needs.
|
|
|
|
|
SSCommitted
Group: General Forum Members
Last Login: 2 days ago @ 8:58 AM
Points: 1,901,
Visits: 1,619
|
|
tjaybelt, this is way cool, thanks so much for being willing to share.
Do you know offhand the differences between using this method and replacing the trace files with a DDL trigger? I can think of two - interoperability with SQL 2K, and there are some events that you can't catch with a DDL trigger. I was looking at using DDL triggers to do some auditing, and if there is not too much functionality difference may replace the trace portion with a DDL trigger and take advantage of the central administration process you've built.
Thanks!
Chad
|
|
|
|
|
Grasshopper
Group: General Forum Members
Last Login: 2 days ago @ 9:04 AM
Points: 14,
Visits: 431
|
|
| Thank you for your interesting article. I was working through it this afternoon, but I am missing a procedure "spGetDirExists". I that something that should have been included?
|
|
|
|
|
Forum Newbie
Group: General Forum Members
Last Login: Friday, March 12, 2010 10:21 AM
Points: 6,
Visits: 2,499
|
|
| Its really the same as the spGetFileExists. see the doc for the xp_fileexists stored procedure that it calls. One of the columns in the result set indicates if the 'file' is a directory.
|
|
|
|
