Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Enabling Audit for SQL Server 2005 / PCI Compliance Expand / Collapse
Author
Message
Posted Monday, August 3, 2009 3:05 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Saturday, August 29, 2009 6:20 AM
Points: 1, Visits: 4
Hello there,

We've got to enable auditing for critical DB servers which stores Card holder data. I've read Brian Kelley's article "SQL Server Auditing - Part 1" and "
Auditing with SQL Profiler". What I don't understand is how to use the profiler to enable auditing for a particular table/column which houses the card holder data. Also, the end goal is to move these logs to a centralized log management server (RSA enVision). Can we export the profiler logs to enVision?

If someone performs a select/alter/drop query on this table we wish to log the event for analysis. In addition, we wish to log account management events. Any help is greatly be appreciated.

Thank you,
V
Post #764406
Posted Monday, August 3, 2009 3:30 PM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Thursday, May 15, 2014 5:11 PM
Points: 6,067, Visits: 5,283
I would say the profiler method could certainly do all that. You could also look at DDL triggers to capture the object changes and logon triggers to capture logins..

CEWII
Post #764427
Posted Tuesday, August 4, 2009 8:19 AM


SSChampion

SSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampionSSChampion

Group: General Forum Members
Last Login: Today @ 6:34 AM
Points: 11,157, Visits: 12,898
If you only want to audit access to 1 table you could apply filters on DatabaseId and ObjectId.

I don't know anything about RSA EnVision, but I would assume you could load the trace files into it even if you have to do something custom.




Jack Corbett

Applications Developer

Don't let the good be the enemy of the best. -- Paul Fleming

Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
How to Post Performance Problems
Crosstabs and Pivots or How to turn rows into columns Part 1
Crosstabs and Pivots or How to turn rows into columns Part 2
Post #764831
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse