SQL Server Logs

Question

SQL Server Logs

Grace09

SSCommitted

Points: 1532
More actions
January 22, 2014 at 2:23 pm

#288634

SQL Server Logs is filled with one specific failed login. I disabled the account, but the failed login still writes to the Logs. How can I prevent this? I don't want to disabled the failed logins feature on the server properties. Thank you.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

george sibbald SSC Guru Points: 104210 More actions · Answer 1

You need to prevent it from repeatedly trying to connect to SQL. this could even be a hacking attempt. The login failure message should give an ip address for the client, start there, talk to your sysadmins and\or security people

---------------------------------------------------------------------

Grace09 SSCommitted Points: 1532 More actions · Answer 2

Thanks, George. I will talk to our system admin. but at the same time, since all the failed logins are recorded in the Error Logs, which makes it grows fast. Is there a way to prevent writing the specific failed logins to the Logs?

george sibbald SSC Guru Points: 104210 More actions · Answer 3

other than the obvious you understandably don't want to use, I don't know of a way. There may be a trace flag to change this behaviour.

---------------------------------------------------------------------

Gail Shaw SSC Guru Points: 1004504 More actions · Answer 4

You can prevent all failed logins from writing to the log, but not one specifically

Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

We walk in the dark places no others will enter
We stand on the bridge and no one may pass