Please ignore my previous comment.

Thanks for the response

Thanks for the elaborate reply but looks like I still cannot get this to work.

My Query:

CREATE EVENT SESSION [AlterExtendedEvent] ON SERVER

ADD EVENT sqlserver.object_altered(SET collect_database_name=(0)

ACTION(sqlserver.database_name,sqlserver.nt_username,sqlserver.session_nt_username,sqlserver.sql_text)

WHERE ([database_name]='AAAAAA' AND NOT ([nt_domain]='ABC' AND [nt_user]=N'DEF')))

ADD...

When I use database_name as the only filter it works well.

But when I add nt_user /session_nt_username under predicates everything goes for a toss.I get data I do not want to...

I tried to filter starting with one filter as suggested and still does not work.Obviously I am doing this completely wrong.Any suggestions please.I still find rows with AAAA\ZZZZ against nt_username...

Are you saying 'alter' works and not 'ALTER' ?

This was certainly not an interview question.

1.I have accumulated relevant information from across servers(110+ servers)  into a central server using SSIS. But that was more of a SQL monitoring solution...

Thanks.That worked

Thanks

Thank you John.

Would you please elaborate on how to configure an email alert once an event happens which we needs to be emailed?

Also...

I am able to capture NTLogins activity.But the...

Thanks for the response.I do agree with everything you have mentioned . But I don’t decide.

Do you know of any 3rd party open source applications which do the work of a trigger ?

Even if I use sql audit I believe I need a sql job to frequently check the audit log for whatever data I am looking for in it which should...

I tried that . it’s not working

Awesome Jeff Moden...but not enough ....I did not know I could post here and also expect an answer and then give it back to the interviewer all at the same...

if EXISTS (SELECT 1 from inserted)
if EXISTS (SELECT 1 from deleted)
 adding the above two  before begin  in both add and delete triggers did the job.
Thanks