SQL SERVER Audit problem

Last Post 02 Sep 2011 07:21 AM by Pearl. 3 Replies.
AddThis - Bookmarking and Sharing Button Printer Friendly
  •  
  •  
  •  
  •  
  •  
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
trans53
New Member
New Member

--
18 Jan 2011 05:46 PM

Hi guys,


i have this problem:

i need to create SQL SERVER Audit (just SELECT) for 1 table using APPLICATION LOG for a windows domain group which include 4 domain accounts.
This domain account used by dba's.

Below are the commands that i am using.
When i am using this group below and select from the table i don't see anything in the application log,
but when i use dbo instead of [Domain\DBAs] i can see the logs are generated in the application log.

Is there something that i am missing?  

 use master
 go
 
 CREATE SERVER AUDIT audit_Customer TO application_LOG
     WITH ( QUEUE_DELAY = 1000,ON_FAILURE = CONTINUE);
 
 ALTER SERVER AUDIT audit_Customer
 WITH (STATE = On)

 use Customer
 go
 
 CREATE DATABASE AUDIT SPECIFICATION audit_select_Customer
 FOR SERVER AUDIT audit_Customer
 ADD (SELECT ON dbo.Customer by [Domain\DBAs])
 WITH (STATE = ON)
 
 ALTER DATABASE AUDIT SPECIFICATION audit_select_Customer
 WITH (STATE=ON)

russellb
New Member
New Member

--
19 Jan 2011 05:41 AM
I believe that the audit_action_group_name must be one of these specified here: http://technet.microsoft.com/en-us/...80663.aspx
trans53
New Member
New Member

--
19 Jan 2011 07:46 AM
Thanks Russell, i checked the link you provided but can't find any of those that could do the trick.
Pearl
New Member
New Member

--
02 Sep 2011 07:21 AM
Create a database Role and add the user [Domain\DBAs]) to this role. In the audit add the database role instead of the user name. This is the only way if you need to audit sysdmins wihtout using dbo.

Hope this helps. Please post the results
You are not authorized to post a reply.

Acceptable Use Policy