question

amfineandyou123 avatar image
amfineandyou123 asked

SQL Server Audit

Hi Team,

Is there any way we can find who created Audit under Security-> Audit? It has been created some years ago to find the failed Login group, Successful Login group etc but not sure who created these Specification.

Thank you!!!

sql-server-2008-r2
10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

2 Answers

·
JohnM avatar image
JohnM answered

I think something like this would help:

select sp.name,* from sys.server_audits sa
inner join sys.server_principals sp on sa.principal_id = sp.principal_id

The principal_id in sys.audits which I believe will be the creator.

10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

amfineandyou123 avatar image
amfineandyou123 answered

Thank you John. I just tried to create an Audit spec in a Play server and ran the above command,but it is showing as SA -> Principal ID is 1.

1 comment
10 |1200
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

JohnM avatar image JohnM ·

Hmmm, that's not what I would have expected.

0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.