I'm currently trying to create a test implementation of SQL Server Audit in SQL Server Management Studio to see how it works. I created an test audit at the server level, and another one at the database level. In SQL Server, audits are disabled by default when they are first created, so I enabled both of them and tested to see if it worked. I updated several rows and deleted a role in a table that was in the tracked database. When I went to check the log, it didn't show any changes at the database level. I made a few changes (described below), and it did reflect those changes in the SQL Server Audit log.
First, I thought the log might need to be refreshed, so I refreshed the logs at both the database and server level. I restarted SQL Server Management Studio. Still wasn't working. I tried to specify which database to track at the server level by using the filter tool in the Properties menu by adding "([database_name]='test_database_name')".
Then, I thought maybe the problem was occurring at the database level, so I rechecked the configuration settings in the database audit properties menu. When selecting the Audit Action Types you want to track, you also have to set the Object Class, the Object Name, and the Principle. At first, I had set all of the Audit Action Types to track at the database level because I want to track all of the tables in the database, but I changed the Database to Object and selected all of the table names in the Object Name field. I'm not exactly sure what the Principal field does, but you have to select a particular user for the Principal. I started by selecting the Administrator role because I'm working on a test database, but I changed it to [sys]. None of these changes have had an effect.
Can anyone think of any reasons why the Server Audit log wouldn't be registering changes?