1) Add the event class 'Audit Login Change Password - Reset' to the SQL audit template in use if it is not there already.
2) Create a new search with the following criteria on the 'WHAT' tab:
a) Add (drop down) | Event Class: 'Audit Login Change Password - Reset'
b) Add (drop down) | Sub-system | SQL | Object: SA
3) Name the search and save accordingly
4) Alert-enable the search with desired notification settings
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center