C-2 and other auditing

Question

C-2 and other auditing

Calvin Duffy

SSCarpal Tunnel

Points: 4306
More actions
January 16, 2008 at 10:58 am

#185737

SQL Server 2000 SE SP4 WIndows 2000 SP4.
We have been requested to monitor a client database to find out who are making changes to database (By creating a log file) including inserts, deletes, updates and even DBA changes.
We need the statament run, who ran it and from where it was ran.
I know that there are some third party tools out there. Does any one doing any auditing ?. If so, what is the best tool to do it ?
If I use C-2 Auditing, what is the performance hit (At least an estimate) ? Can I do the monitoring only on 1 database and not the others ?
Any suggestions are welcome.................Thanks.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

colin.Leversuch-Roberts SSC Guru Points: 52643 More actions · Answer 1

this type of auditing is not simple to implement, I have used C2 but can't remember what impact it had on the server. There are some commercial products available, sorry can't remeber the names but they were quite expensive, say £15k + and often needed another sql server as a repository ( more license costs ) Cheap solutions use triggers which will likely bring your server to its knees.

It's easier in sql 2005, I never found a cheap efficient solution for sql 2000.

[font="Comic Sans MS"]The GrumpyOldDBA[/font]
www.grumpyolddba.co.uk
http://sqlblogcasts.com/blogs/grumpyolddba/

Calvin Duffy SSCarpal Tunnel Points: 4306 More actions · Answer 2

These are some of them but I am not sure about any of them creating a log file that can be archived/viewed in need. I would do the C-2 auditing but there are other client's databases on the server and can't have the C-2 impact on those.................How is it done on SQL Server 2005 ?

http://www.lumigent.com/products/auditdb.html

http://www.apexsql.com/sql_tools_audit.asp

http://www.krell-software.com/omniaudit/index.asp

http://www.rlpsoftware.com/mainframe.asp?contents=SQLLog.asp&mainmenu=SQLLog&submenu=Info

http://www.upscene.com/index.htm?./products/audit/mssqllm_main.htm

colin.Leversuch-Roberts SSC Guru Points: 52643 More actions · Answer 3

you can use dml triggers which are database wide.

There wasa product I saw a demo of which used a sniffer to capture sql going to the server, so it didn't impact the box - quite impressive might have been called something like sql guardian.

Lumigent product is excellent but was expensive, evaluated it.

[font="Comic Sans MS"]The GrumpyOldDBA[/font]
www.grumpyolddba.co.uk
http://sqlblogcasts.com/blogs/grumpyolddba/