You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The general form for defining an action to be audited is:
61
65
62
66
[action] ON [object] BY [principal]
63
67
64
68
Note that [object] in the above format can refer to an object like a table, view, or stored procedure, or an entire database or schema. For the latter cases, the forms DATABASE::[dbname] and SCHEMA::[schemaname] are used, respectively.
65
69
66
-
For example:
67
-
SELECT on dbo.myTable by public
68
-
SELECT on DATABASE::myDatabase by public
69
-
SELECT on SCHEMA::mySchema by public
70
-
71
-
For more information, see https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions#database-level-audit-actions.
72
-
73
-
```yaml
70
+
For example:
71
+
SELECT on dbo.myTable by public
72
+
SELECT on DATABASE::myDatabase by public
73
+
SELECT on SCHEMA::mySchema by public
74
+
For more information, see https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions#database-level-audit-actions.```yaml
The recommended set of action groups to use is the following combination - this will audit all the queries and stored procedures executed against the database, as well as successful and failed logins:
87
-
88
-
"BATCH_COMPLETED_GROUP",
89
-
"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP",
90
-
"FAILED_DATABASE_AUTHENTICATION_GROUP"
87
+
The recommended set of action groups to use is the following combination - this will audit all the queries and stored procedures executed against the database, as well as successful and failed logins:
91
88
92
-
This above combination is also the set that is configured by default. These groups cover all SQL statements and stored procedures executed against the database, and should not be used in combination with other groups as this will result in duplicate audit logs.
93
-
For more information, see https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions#database-level-audit-action-groups.
94
-
95
-
```yaml
89
+
"BATCH_COMPLETED_GROUP",
90
+
"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP",
91
+
"FAILED_DATABASE_AUTHENTICATION_GROUP"
92
+
This above combination is also the set that is configured by default. These groups cover all SQL statements and stored procedures executed against the database, and should not be used in combination with other groups as this will result in duplicate audit logs. For more information, see https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions#database-level-audit-action-groups.```yaml
0 commit comments