About Audit Views
An audit view is a collection of SQL Server audit events you want to view. You can open the Audit Viewer window to review and analyze the results.
Packages I Need to Use This Feature |
||
Module |
Description |
License Required? |
Server/Console |
The Server/Console module provides fundamental setup features such as deploying agents; configuring email accounts; and creating schedules to associate with collectors, policies, and auditing. |
ü |
Auditor for SQL Server |
The Auditor for SQL Server tracks changes to SQL objects. Each audit event includes the who, what, where, and when information for all changes. It also includes before and after values for all attributes. |
ü |
Audit View Search Filter
Search the Audit View list using the search filter provided at the top of the window. Audit Views can be searched by name using keywords.
Built-in Audit Views
Under the Audit Views node, you will see two folders: Built-in and My Audit Views. Auditor for SQL ships with a complete set of pre-built audit views for you to use.
The folder labeled My Audit Views is a private user account folder. Any views or subfolders created under this folder are only accessible by the user who created them.
Name | Description |
---|---|
All Changes in Last 24 Hours |
View all SQL server audit activity from the past 24 hours. |
Deleted SQL Server Objects |
View deleted objects, such as tables, indexes, and procedures. |
Failed Login Attempts |
View failed login attempts. Useful for identifying possible security breach attempts and troubleshooting login failures. |
Function Changes |
View all creations, deletions, and modifications performed on functions. |
Index Changes |
View all creations, deletions, and modifications performed on indexes. |
Modified SQL Server Objects |
View modified objects, such as tables, indexes, and procedures. |
Newly Created SQL Server Objects |
View objects, such as tables, indexes, and procedures created in the past seven days. |
Procedure Changes |
View all creations, deletions, and modifications performed on functions. |
Server Instance Changes |
View changes to the SQL Server global configuration settings. Not available for SQL Server 2005. |
Server Role Changes |
View when members have been added to or removed from a SQL server role. |
User Changes |
View all creations, deletions, and modifications performed on users. |
View Changes |
View all creations, deletions, and modifications performed on views. |