I'm using Microsoft SQL Server 2008 (SP3). I have server and database level audit specifications in place. I can specify inset, update or delete actions and it works fine if principal name is set to public or dbo.
But in this case, i have so many logs because most of this actions is run by sql service accout.
But when i select certain user example John for action insert/update or delete there is no record in Audit Logs.
Also, I have check this on Microsoft SQL Server 2012 (SP1).
Any advice, please?