An administrator added the "t1906" startup switch to each instance of SQL and created a SQL Data Level audit template, but the agent was not capturing any any event data.
SQL auditing data is obtained for SQL Trace Providers, the Trace Providers typically has the same name as the SQL instance, the Instance name(s) in the Trace Provider list must match the name(s) configured in the Change Auditor SQL Audit template below.
Type “C:\>logman query providers” in the “Command Prompt” on each SQL server for a list of trace providers. The list may be redirected to a text file for clarity. All other providers except for SQL, were removed (for clarity) from the example output list shown below.
Each trace provider typically has a unique GUID.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center