Can Toad display what NT User made the transaction in the Log Reader? It currently notes “sa” for every transaction.
Toad helps notes “The Log Reader can collect NT User, SQL Login, User Host, and Application information for transactions started only when it is connected to the server.”
What exactly does this means?
Can the NT User information be included in the Export option within the Log Reader?
Log Reader is able only retrieve NT User name if Windows Authentication is using to connect Sql Server.
If “sa” is noted for every transaction, it may be that the users are using one “sa” account to login to the SQL Server. This may be the case when users are working through a Web App which connects to SQL Server by using one (“sa”) account.
In general, SQL does not collect the userID, only the SID (the transaction SID). To get a userID Toad Log Reader uses and queries Active Directory (AD) to map the SID and get username and other user info. If the SID is not local to the server you are running log reader on, or a SQL user account, then the mapping must be done via a request to a domain controller and an Active Directory lookup.