Audit connections via extended events

  • Hi,

    Did you ever find an answer to your question, I am having the same issue?

    Thanks

    Rory

  • I think you are out of luck as far as Xevents go. You have 2 options:

    1. Configure the instance to log failed and successful logins which sends them to the event log where you get a message like this with event id 18453:

    Date7/23/2014 1:08:00 PM

    LogWindows NT (Application)

    SourceMSSQLSERVER

    Category(4)

    Event18453

    Useruser name

    Computerserver name

    Message

    Login succeeded for user 'user name'. Connection made using Windows authentication. [CLIENT: <local machine>]

    2. Server-side trace and just keep the trace files small and have a job process the trace files. You'd have to experiment with the frequency of the processing based on how big and how many trace files you allow.

  • Despite the oldness of this thread, you only have those options in 2008R2.

    Just another driving force for the upgrade to 2012. 😉

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

  • SQLRNNR (7/23/2014)


    Despite the oldness of this thread, you only have those options in 2008R2.

    Just another driving force for the upgrade to 2012. 😉

    Are you stalking me? You seem to be commenting on everything I post on today 😀

  • Jack Corbett (7/23/2014)


    SQLRNNR (7/23/2014)


    Despite the oldness of this thread, you only have those options in 2008R2.

    Just another driving force for the upgrade to 2012. 😉

    Are you stalking me? You seem to be commenting on everything I post on today 😀

    Yeah go figure. You just seem to be getting to the interesting topics before me.:-D

    Jason...AKA CirqueDeSQLeil
    _______________________________________________
    I have given a name to my pain...MCM SQL Server, MVP
    SQL RNNR
    Posting Performance Based Questions - Gail Shaw[/url]
    Learn Extended Events

Viewing 5 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply