2

In BOL it is mentioned:

enter image description here

Does this mean Extended Events can capture all the events that are traced by auditing? Can we get all the functionalities of auditing just by using XEvents?

Improve this question

1 Answer 1

Reset to default
9

Extended Events can capture all the events that are traced by auditing?

Yes and no. The built in auditing framework is built upon the extended events framework. This means any of the built in auditing will be serviced via the XE framework, assuming it is setup.

Can we get all the functionalities of auditing just by using XEvents?

You can get most, but it's not 100% coverage. Since the auditing is built upon the framework there would be the possibility, however not all auditing events have a 1 to 1 or even a correlated mapping to non-auditing based extended events.

Improve this answer
1
  • Also the auditing functionality has hooks in the engine to do things like preventing the service from running if the audit is not available to capture data. And preventing the disabling of the audit functions while the service is running.
    – Jonathan Fite
    Commented Oct 24, 2020 at 4:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.