About Audit Views

An audit view is a collection of SQL Server audit events you want to view. You can open the Audit Viewer window to review and analyze the results.

Packages I Need to Use This Feature

Module

Description

License Required?

Server/Console

The Server/Console module provides fundamental setup features such as deploying agents; configuring email accounts; and creating schedules to associate with collectors, policies, and auditing.

ü

Auditor for SQL Server

The Auditor for SQL Server tracks changes to SQL objects. Each audit event includes the who, what, where, and when information for all changes. It also includes before and after values for all attributes.
The Audit Viewer, built-in audits, and creating collector policies are key features provided by the auditor module

ü

Audit View Search Filter

Search the Audit View list using the search filter provided at the top of the window. Audit Views can be searched by name using keywords.

Built-in Audit Views

Under the Audit Views node, you will see two folders: Built-in and My Audit Views. Auditor for SQL ships with a complete set of pre-built audit views for you to use.

The folder labeled My Audit Views is a private user account folder. Any views or subfolders created under this folder are only accessible by the user who created them.

Name Description

All Changes in Last 24 Hours

View all SQL server audit activity from the past 24 hours.

Deleted SQL Server Objects

View deleted objects, such as tables, indexes, and procedures.

Failed Login Attempts

View failed login attempts. Useful for identifying possible security breach attempts and troubleshooting login failures.

Function Changes

View all creations, deletions, and modifications performed on functions.

Index Changes

View all creations, deletions, and modifications performed on indexes.

Modified SQL Server Objects

View modified objects, such as tables, indexes, and procedures.

Newly Created SQL Server Objects

View objects, such as tables, indexes, and procedures created in the past seven days.

Procedure Changes

View all creations, deletions, and modifications performed on functions.

Server Instance Changes

View changes to the SQL Server global configuration settings.

Not available for SQL Server 2005.

Server Role Changes

View when members have been added to or removed from a SQL server role.

User Changes

View all creations, deletions, and modifications performed on users.

View Changes

View all creations, deletions, and modifications performed on views.