Change Auditor for SQL Server 7.4


	NOTE: SQL auditing is only available if you have licensed Change Auditor for SQL Server Server. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.

Auditing SQL Server events

To capture SQL events in Change Auditor, you must define the SQL instances to be audited and the events to be captured:

Assign the pre-defined ‘Best Practice SQL Auditing Template’, that audits key SQL events that occur on the default SQL instance, to an agent configuration.

Or create a new SQL Auditing template which specifies the SQL instances and events to audited and assign this template to an agent configuration.

Assign the agent configuration to agents.

Auditing SQL Data Level events

To capture SQL Data Level events, you must assign SQL Data Level auditing templates to an agent when you create the template. Each audited database requires one template assigned to a single agent.

For information on creating templates, see To create a new SQL Data Level auditing template:.

Auditing SQL Extended Events

To capture SQL Extended Events data, you must create an SQL Extended Events auditing template. A remote agent may be specified, otherwise an agent must be installed on the SQL Server host to be audited.

For information on creating templates, see the Change Auditor PowerShell Command Guide.

Apply SQL Server auditing template

Change Auditor for SQL Server includes a configured auditing template, named Best Practice SQL Auditing Template that you can apply to an agent configuration to audit the default SQL instance to capture key SQL events or used as a starting point for creating a new template.

The following steps walk you through the process of applying the pre-defined SQL Auditing template to get you started.

To assign the Best Practices SQL Auditing template to an agent configuration:

Open the Administration Tasks tab.

Click Configuration.

Select Agent (in the Configuration task list) to open the Agent Configuration page.

Click Configurations.

This displays the Configuration Setup dialog, which contains a list of configuration definitions available.


	NOTE: The Default Configuration is the only configuration listed if you have not defined any other agent configurations. For more information about defining agent configurations, see the Change Auditor User Guide.

On the Configuration Setup dialog, use one of the following methods to assign this template to an agent configuration:

•

Select the Best Practices SQL Auditing template and drag it onto a configuration in the Configuration list.

•

Select a configuration from the Configuration list and drag it onto the Best Practices SQL Auditing template.

•

Select a configuration, then select the Best Practices SQL Auditing template, right-click and select Assign.

•

Select a configuration, then select the Best Practices SQL Auditing template, click in the corresponding Assigned cell and click Yes.

Click OK to close the Configuration Setup dialog and return to the Agent Configuration page.

Select an agent from the list, click Assign and then select the agent configuration to assign to the agent from the displayed dialog. Click OK to save your selection and close the Agent Assignment dialog.

On the Agents Configuration page, select the agents assigned to use the modified agent configuration (Auditing appears in the SQL column) and click Refresh Configuration to ensure the agents are using the latest configuration.


	NOTE: If you do not refresh the agent’s configuration, the agent will automatically check for a new agent configuration based on the polling interval setting (located on the System Settings tab of the Configuration Setup dialog). The default is every 15 minutes.