Regarding auditing in SQL Server 2008

Question

Regarding auditing in SQL Server 2008

shivani.suri2999

Mr or Mrs. 500

Points: 591
More actions
September 18, 2009 at 5:58 am

#226306

Hi,
I have some queries regarding auditing in SQL Server 2008.
These are:
1. What is the difference between auditing with SQL trace and auditing with SQL Server Audit feature?
2. Are audit events, which get captured in both SQL trace and SQL Server Audit feature, same?
Any help in this regard would be appreciated.
Thanks in advance.
Shivani.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Silverfox SSC-Insane Points: 23150 More actions · Answer 1

shivani.suri2 (9/18/2009)
Hi,
I have some queries regarding auditing in SQL Server 2008.
These are:
1. What is the difference between auditing with SQL trace and auditing with SQL Server Audit feature?
2. Are audit events, which get captured in both SQL trace and SQL Server Audit feature, same?
Any help in this regard would be appreciated.
Thanks in advance.
Shivani.

ok, some forms of auditing in 2008 can be considered as a light weight trace, depends on if you are talking about extended events. it is a big subject and there are very good articles on this site.

these are pretty good articles. the second link is about audit and is worth a read.

http://www.sqlteam.com/article/introduction-to-sql-server-2008-extended-events

http://www.sqldbatips.com/showarticle.asp?ID=134

--------------------------------------------------------------------------------------
[highlight]Recommended Articles on How to help us help you and[/highlight]
[highlight]solve commonly asked questions[/highlight]

Forum Etiquette: How to post data/code on a forum to get the best help by Jeff Moden[/url]
Managing Transaction Logs by Gail Shaw[/url]
How to post Performance problems by Gail Shaw[/url]
Help, my database is corrupt. Now what? by Gail Shaw[/url]

ChiragNS One Orange Chip Points: 26137 More actions · Answer 2

ChiragNS

One Orange Chip

Points: 26137

September 21, 2009 at 1:01 am

#1056106

Light-weight is the key word there .

"Keep Trying"

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 3

SQL Server Audit is a new feature in SQL Server 2008 that is only available in Enterprise Edition. It is built upon Extended Events.

SQL traces have been around for a while and use another system for capturing events and it is available in all editions. In some cases there is overlap between traces and extended events but there are a lot of events that do not overlap between the two.

Extended events are supposed to be more lightweight overall and the key is you can tie an Audit specification to a SELECT statement against a particular table in a database, where you'd have to be pretty clever with filters in a trace to do the same. However, traces are better able to capture more of what's going on, rather than honing in on a single table or a single operation against a table.

Which is appropriate really depends on your auditing needs.

K. Brian Kelley
@kbriankelley

steve smith-401573 SSChampion Points: 10889 More actions · Answer 4

Brian,

Are you positive that Audit is NOT available in Standard Edition? There seem to be some capabilities built into SE. If it is NOT available in SE, then where do I turn to identify the trace tools and settings I need? I will be required to provide a very elaborate auditing scheme within the next two weeks, after being away from SS for almost a year.

Steve