SQL Database Audit Server Audit Qn

Question

SQL Database Audit Server Audit Qn

Viewing 2 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

Allen Rich SSC Enthusiast Points: 128 More actions · Answer 1

Below articles can help you to create required server audit and specifications:

https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/create-a-server-audit-and-server-audit-specification

https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-database-engine

https://tabledependency.codeplex.com/wikipage?title=SqlTableDependency

Alternatively, you may try this automated solution ( https://www.lepide.com/lepideauditor/sql-server-auditing.html ) which can help you to audit required SQL changes from a centralized location.

jasona.work SSC Guru Points: 50223 More actions · Answer 2

Creating an Audit (server or database) requires two things:
1. An Audit definition at the server level (Server->Security->Audits) which defines *where* the audit will be saved (File, Application Log, or Security Log)
2. A Database Audit Specification that defines *what* is going to be audited, which points to the Audit definition for where to be saved.

If you set the Audit Definition to point to a file location, you need to ensure that the SQL Server service account has Full Control (you could also try lower privileges such as Modify and Read) to the location in question, or SQL won't be able to create the audit files, and the audit fails.