973
Chapter 42: SQL Audit
42
Modifying Server Audit Specifi cations
You can add New Action Audit Types to the Server Audit Specifi cation if the Server Audit
Specifi cation is disabled:
Alter Server Audit Specification name
Add (Action Group)
To redirect a Server Audit Specifi cation to a new SQL Server Audit, the Server Audit
Specifi cation must be disabled.
Database Audit Specifi cations
Database Audit Specifi cations are created using the same UI dialog as the Server Audit
Specifi cation. Like the Server Audit Specifi cation, there may be only one Database Audit
Specifi cation per Database, per SQL Audit. To create multiple Database Audit Specifi cations,
there must be multiple SQL Audits — one per Database Audit Specifi cation.
The critical point is that Database Audit Specifi cations can audit DML events such as select,
insert, update, and delete, as shown in Figure 42-3. You can also see the list of possible
Database Audit Action Types in the drop-down list.
Beginning with SQL Server 2012, new audit groups exist that enable you to support the
monitoring of contained database users.
FIGURE 42-3
This Database Audit Specifi cation records every select statement executed by the dbo user
in the AdventureWorks2012 database and passes the audit data to the SQL Server 2012 Bible
SQL Audit bucket.
c42.indd 973c42.indd 973 7/31/2012 10:17:49 AM7/31/2012 10:17:49 AM
http://www.it-ebooks.info