I need to setup a sql audit to capture all queries running on a server from any unauthorized locations, and one of the columns that is required is Row Count.
In sql trace, this is possible. But I can't seem to find corresponding column in extended events. I looked into these 2 DMVs:
select * from sys.dm_xe_object_columns where object_name = 'sql_statement_completed' select pkg.name as PackageName, obj.name as ActionName from sys.dm_xe_packages pkg inner join sys.dm_xe_objects obj on pkg.guid = obj.package_guid where obj.object_type = 'action' order by 1, 2
But all they have is reads/writes, but not actual number of rows.
Is it possible to get this info in SQL 2008 or SQL 2008 R2 ?