Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
asqldeveloper
Starting Member
17 Posts |
 Posted - 2013-09-03 : 14:07:54
|
| I know that we can write Audit events to both file and Windows Event Log.I know that a typical message in the event log is as shown(only part of log shown)Audit event: event_time:2013-09-03 17:40:27.7700000sequence_number:1action_id:LGISsucceeded:trueis_column_permission:falsesession_id:59server_principal_id:2database_principal_id:0target_server_principal_id:0target_database_principal_id:0object_id:0user_defined_event_id:0class_type:LXstatement:-- network protocol: TCP/IPCouple of questions:1. Can I customize how this event is written to security log? Here is why, if you see the action_id is LGIS. If I query the sys.dm_audit_actions it means Login Succeeded. Instead I want the action description to be written as "Login Succeeded" which is more meaningful.2. Where can I find a description of what the headers mean? For example I want to know what class_type means?I really would love to customize the message written to event log so that I can give more valuable information especially the "Statement".Any quick feedback is much appreciated. |
|
|
|
|
|
Alter message of SQL Server Audit to Windows Log