Jack Corbett (5/5/2014)
I've been asked to research auditing products for SQL Server, currently a mostly 2008 R2 environment. I'm wondering what people out there are using and what they've found are the strengths and weaknesses of what they are doing.Here are some of the products I've found out there:
- SQL Audit - built-in but need EE to do what needs to be done.
- Enforcive Cross Platform Audit
- LepideAuditor for SQL Server[/url]
- ApexSQL Comply
- Idera SQL Compliance Manager
[/li]
Right now we are just looking at auditing permissions, schema & configuration changes, and access. We aren't currently looking to audit changes to data.
If you only need auditing for permissions, schema & configuration changes, and access...all this is available within SQL Server 2008.
These links will help how to setup auditing:
http://technet.microsoft.com/en-us/library/dd392015%28v=sql.100%29.aspx
http://www.sqlservercentral.com/blogs/sqlrnnr/2010/03/19/security-audit/
http://www.sqlservercentral.com/blogs/cleveland-dba/2012/07/09/sql-audit-101-creating-a-basic-audit/
http://www.sqlservercentral.com/blogs/cleveland-dba/2012/07/16/sql-audit-102-reading-audit-output/