0

As I am slightly new to SQL Server administration I am struggling with a requirement given to me by my security audit team. We have a web based application which is using MS SQL Server 2017 as database server. The users of the application are being authenticated through LDAP hence no SQL server logins/ database users have been separately created. However, there are two admin logins which are responsible for maintaining the database. The audit team has asked to record all the commands/queries which are run directly on server by SQL admin logins. I have tried capturing those with SQL Server Audit, but it is capturing way lot more of information than what is actually required. Is there any other better way of doing this or SQL Server Audit is the only solution.

2
  • Product recommendations are off topic here, but there are several third-party auditing tools that might do what you want. If you rephrase your question to be more about how to effectively filter out the information that doesn't match your auditing needs, you might get some helpful answers. Maybe include some examples of the audit log entries that you want to see, and examples of the entries that you don't want to see.
    – Doug Deden
    Commented Aug 4, 2022 at 15:38
  • 3
    Why don't you create a filter for that audit to reduce what's being captured? see if this answer related to filtering the audit helps.
    – Ronaldo
    Commented Aug 4, 2022 at 16:48

0

Browse other questions tagged or ask your own question.