Is it possible to audit on a listener. For example I have a SQL 2017 Enterprise server that has 5 instances of SQL all with Always on Availability. One of the instances has 3 availability groups AG1 has all but 2 of the databases AG2 has the other two. I can connect to the 3rd AG and see all the databases in one view.
Auditing is setup at a server level and the logs can be viewed at that level, but when I am connected to AG3 I can see all the databases but the audit log is empty.
My question is to you have to be connected via the instance name only to view the audit logs or should I be able to connect to the listener and see them there as well.
Hope this makes sense.