Post reply

how can you configure your audit of failed logins to send email upon suspicious multiple login failure

  • February 24, 2006 at 11:35 am

    #168475

    how can you configure your audit of failed logins to send email upon suspicious multiple login failure?

    thanks

     

    also could not find for example in my application event or sql server log log how to send email to operator/.administrator based on a failed login message

     

    thax,

    adam

  • February 24, 2006 at 1:07 pm

    #623315

    You can use LogParser (free from MS) to do a simple query of the event log and insert the results into a table. If you gather a number, arbitarily set by you, of failed log ons you can fire sx_sendmail to send you an email.

    If you search this site, there is an article that details the use of logparser.

  • February 24, 2006 at 1:07 pm

    #623314

    should be xp_sendmail

  • February 24, 2006 at 2:20 pm

    #623326

    Enterprise Manager->Server Properties->Security->Audit and capture the failed logins and send an email...

     

    -Krishnan

  • February 25, 2006 at 8:24 am

    #623354

    thanks all, i will try it! Is it difficult to configure sql to use email or net send??

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply