Auditing Events

Question

Post reply

Auditing Events

Steve Jones - SSC Editor

SSC Guru

Points: 736173
More actions
July 29, 2010 at 9:16 pm

#74076

Comments posted to this topic are about the item Auditing Events

Viewing 15 posts - 1 through 15 (of 18 total)

You must be logged in to reply to this topic. Login to reply

UMG Developer SSChampion Points: 13482 More actions · Answer 1

I like having a theme day on the QotD to help raise awareness of the new features. thanks!

SQL_Hunt SSC-Dedicated Points: 33518 More actions · Answer 2

By default, the audit events are written to the audit target in an asynchronous fashion. Question was not posted properly I guess.

Thanks.

bbop1322 SSCommitted Points: 1714 More actions · Answer 3

I got it wrong too but I'm not blaming the guy who asked the question! 😀

I did some research after this to become more familiar with the subject matter. The question i have is that i can find no place to configure the synchronicity of the log writing. I now know where to create them at both the Server and Database level but cannot determine where to configure the synchronicity at. Can someone point me in the right direction?

On a side note, is anybody currently using this meet HIPAA standards? If so, would you care to share which audit policies you've put in place?

Thank you,

Brian

Think great, be great!

Daniel Bowlin SSC-Dedicated Points: 34566 More actions · Answer 4

Daniel Bowlin

SSC-Dedicated

Points: 34566

July 30, 2010 at 6:40 am

#1200256

Good question, thanks.

Sean Lange SSC Guru Points: 286590 More actions · Answer 5

Sourav-657741 (7/29/2010)
By default, the audit events are written to the audit target in an asynchronous fashion. Question was not posted properly I guess.

The term "default" should have been pretty obvious that it is a setting. This implies that you can change it. I would have to say that the problem was not in the question but in the reading of it. 😉

Good question Steve.

_______________________________________________________________

Need help? Help us help you.

Read the article at http://www.sqlservercentral.com/articles/Best+Practices/61537/ for best practices on asking questions.

Need to split a string? Try Jeff Modens splitter http://www.sqlservercentral.com/articles/Tally+Table/72993/.

Cross Tabs and Pivots, Part 1 – Converting Rows to Columns - http://www.sqlservercentral.com/articles/T-SQL/63681/
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs - http://www.sqlservercentral.com/articles/Crosstab/65048/
Understanding and Using APPLY (Part 1) - http://www.sqlservercentral.com/articles/APPLY/69953/
Understanding and Using APPLY (Part 2) - http://www.sqlservercentral.com/articles/APPLY/69954/

sknox SSChampion Points: 12388 More actions · Answer 6

bbop1322 (7/30/2010)
... I now know where to create them at both the Server and Database level but cannot determine where to configure the synchronicity at. Can someone point me in the right direction?...

Brian, at http://msdn.microsoft.com/en-us/library/cc280448(SQL.100).aspx, it explains that setting the QUEUE_DELAY property to 0 causes the audit to run synchronously, anything higher causes it to run asynchronously. The default (and minimum non-zero value) is 1000 ms.

bbop1322 SSCommitted Points: 1714 More actions · Answer 7

Thanks for the link, i appreciate that!

Think great, be great!

bbop1322 SSCommitted Points: 1714 More actions · Answer 8

Now, if someone wants to share what types of Audits they have setup for HIPAA purposes i would be able to get that promotion, jk, but it would be helpful to know if i share the same thoughts as others on the topic.

Think great, be great!

Steve Jones - SSC Editor SSC Guru Points: 736173 More actions · Answer 9

Sourav-657741 (7/29/2010)
By default, the audit events are written to the audit target in an asynchronous fashion. Question was not posted properly I guess.

The question was not asking about defaults, so I'm not sure what you mean here. The events can be written in an async or sync fashion, and that is configurable. From the white paper

"...The choice of asynchronous or synchronous is controlled by the QUEUE_DELAY option of the CREATE AUDIT DDL (explained below);..."

Steve Jones - SSC Editor SSC Guru Points: 736173 More actions · Answer 10

bbop1322 (7/30/2010)
Now, if someone wants to share what types of Audits they have setup for HIPAA purposes i would be able to get that promotion, jk, but it would be helpful to know if i share the same thoughts as others on the topic.

Today's editorial asks this question: http://www.sqlservercentral.com/Forums/Topic961091-263-1.aspx

SQLRNNR SSC Guru Points: 281334 More actions · Answer 11

Excellent question. Thanks Steve.

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events

SQLRNNR SSC Guru Points: 281334 More actions · Answer 12

With all of these questions on auditing, Steve must be doing some research on auditing. Does this also mean that auditing is weighing pretty heavily on Steve's mind? You prepping for an audit Steve?

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events

Steve Jones - SSC Editor SSC Guru Points: 736173 More actions · Answer 13

LOL, no, no audit for me. I am working on an auditing presentation, and in research /testing, I built a bunch of questions and writing.

SQLRNNR SSC Guru Points: 281334 More actions · Answer 14

When and where for the preso?

Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events