Chatee ahora con Soporte
Chat con el soporte

InTrust 11.4.2 - Preparing for Auditing Microsoft SQL Server

Collecting Replication Agent History

To prepare for replication agent history gathering

  1. Make as many copies of the necessary data source as there are distributor SQL servers.
  2. For each distributor, do the following:
    • Open the properties of the corresponding data source.
    • In the connection string, specify the name of the distributor SQL server.

Using the Collection Task

The “SQL Server logs daily collection” includes jobs that gather all of the data that the Knowledge Pack is designed for.

Note: If C2 logging is turned off in your environment, disable the “SQL Server C2 log collection” job.

The task’s schedule is disabled by default. To enable the schedule, open the task’s properties and select the Schedule enabled option. The default schedule specifies that collection takes place daily. If necessary, adjust the schedule and rename the task appropriately.

The site from which data is collected includes only SQL servers from the same domain as the InTrust server by default.

If you want to automatically create and store reports on schedule, add a final reporting job to the task and include the reports you need.

For more information about working with tasks and jobs, refer to the Auditing Guide.

Reporting

Reports provided with the Knowledge Pack are grouped by source as follows:

Source

Report Details
C2 log

These reports cover users’ login, account management and database management activity. Events for the reports can be gathered with two data sources:

  1. 1 “All events in C2 log (events for reporting)”
    This data source specifies all events required for reports other than “All events in C2 log”. The data source is used by default.
  2. 2 “All events in C2 log”
    This data source specifies all events in the C2 log. Use the data source to gather events for the “All events in C2 log” report.
Error log These reports cover SQL Server maintenance and logons. If you need reports based on other events, use the “All events in Error log” report with appropriate filters. Reports on Error log events are based on the “SQL Server Error log” data source, which gathers all Error log events.
Replication

These reports cover the history of replication agents (both general and miscellaneous).

Viewing Reports in Knowledge Portal

Knowledge Portal lets you work with reports interactively. This data view application enables you to:

  • Organize the structure of the folders that reports are stored in
  • Apply report properties to a number of reports at a time
  • Customize reports view by modifying sort order within reports

To start working with the Knowledge Portal it is required to specify some of the security settings and data source properties.

Before you can view reports, you have to configure the data source to connect to the product database. Data sources are databases that store the information used in the reports.

It is also required to configure access rights to provide the report users with access to reports they need. These rights are assigned through specifying appropriate SQL Reporting Services role to a user or group account.

After the Knowledge Portal is properly configured open the InTrust Manager and launch a chosen task to create reports you need. Make sure that a reporting job is included in this task. Then in the Knowledge Portal click the Reports tab in the left tabbed pane and select the corresponding report. To view a report, select the View Report option in the right pane.

For detailed information, see Leveraging Microsoft SQL Server Reporting Services Integration for Advanced Reporting.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación