SQL Server Audit (Audit) configuration Method--database-level auditing

Approximate steps:

A. Create an audit

B. to create a database-level audit specification - creation, deletion and modification of monitoring database objects

C. Test Auditing features - Create, modify, and delete database objects

D. Use the log file Viewer to read the audit log

1.   Create an audit

Right-click on the audit - New Audit

under audit name: audit-database

Audit File: File

file path: C:\Myadmin\audit_logs

650) this.width=650; "title=" 11.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/4B/ Wkiol1sugeuzgoiuaajepbhpgto276.jpg "alt=" Wkiol1sugeuzgoiuaajepbhpgto276.jpg "/>

and start auditing Audit-database

650) this.width=650; "title=" 12.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/4E/ Wkiom1suf4qykioraagifgi03tu464.jpg "alt=" Wkiom1suf4qykioraagifgi03tu464.jpg "/>

2.to create a database-level audit specification-monitoring the creation, deletion and modification of database objects

Expand Database ->accdb Database Security - Database Audit Specification -- Right-click the new database Audit specification

650) this.width=650; "title=" 13.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/4E/ Wkiom1suf4qddbq-aajicj4ma5g338.jpg "alt=" Wkiom1suf4qddbq-aajicj4ma5g338.jpg "/>

in the Create Database auditspecification Enter database audit name on interface databaseauditspecification

Click Audit " Audit-database "

in the Audit action type, select: Schema_object_change_group

Schema_object_change_group is a database-level audit Action group that executes on the schema Create\alter\

Drop action, this event is raised

650) this.width=650; "title=" 14.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/4B/ Wkiol1sugeyiorviaappsn21kmm874.jpg "alt=" Wkiol1sugeyiorviaappsn21kmm874.jpg "/>

Start the Database Audit specification

650) this.width=650; "title=" 15.png "style=" Float:none; "src=" Http://s3.51cto.com/wyfs02/M01/58/4E/wKiom1SuF4rA7l3 _aahlztp6h1k462.jpg "alt=" Wkiom1suf4ra7l3_aahlztp6h1k462.jpg "/>

3.Test Auditing features-objects that create, modify, and delete databases ---- Creating database Objects

650) this.width=650; "title=" 16.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/4B/ Wkiol1sugezt3o9faajd38ftqio282.jpg "alt=" Wkiol1sugezt3o9faajd38ftqio282.jpg "/>

--- modify some of the database objects that you created earlier

650) this.width=650; "title=" 18.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/4E/ Wkiom1suf4rxv1zaaac0qk-88by096.jpg "alt=" Wkiom1suf4rxv1zaaac0qk-88by096.jpg "/>

---- to delete a database object that was previously created

650) this.width=650; "title=" 19.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/4B/ Wkiol1sugeyzflataadr-ud33by143.jpg "alt=" Wkiol1sugeyzflataadr-ud33by143.jpg "/>

4.Use the log file Viewer to read the audit log

in the "Security" - The auditing node

Right-click Audit: Audit-databse, Click "View audit Log"

650) this.width=650; "title=" 20.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/4B/ Wkiol1suge2aergxaainhkwdiq4898.jpg "alt=" Wkiol1suge2aergxaainhkwdiq4898.jpg "/>

in the Select Log Hook option " Audit-database "To view detailed operational logging

650) this.width=650; "title=" 21.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/4E/ Wkiom1suf4uivjhlaazr1krmsym086.jpg "alt=" Wkiom1suf4uivjhlaazr1krmsym086.jpg "/>

SQL Server Audit (Audit) configuration Method--database-level auditing