Audit failed login attempts from .audit files

  • For reading audit files for reporting Failed login attempts . 
    Need to read the audit log files already configured . Requirement is store the connection event info including event time ,instance_name, database_name, client IP etc, and store result in table . as the audit logs are going to be recycled
    Currently tried two approaches
    a. fn_get_audit_file
    b. xp_readerrorlog
    Both are giving different number of rows in result.
    Which is preferred. Have SQL Server 2008 R2 and SQL Server 2012

    DBA's need your help on this

  • You should really post in the area of the forum appropriate for the version of SQL Server you're running. You've posted this topic twice and neither time has been in either the 2008 or 2012 sections...

    That being said, how are you querying the audits and log to get your results?

Viewing 2 posts - 1 through 1 (of 1 total)

You must be logged in to reply to this topic. Login to reply