Post reply

Auditing failed logins

  • January 21, 2002 at 7:53 am

    #157639

    I am trying to capture failed logins. I set auditing to Failure, but I cannot find where the failed login information is stored. Also, how do I turn off writting to the Windows Event Application Logs everytime a job completes. I backup the transaction logs every .5 hours and it fills up the event log quickly.



    - Vega

  • January 21, 2002 at 8:10 am

    #422366

    The failed login information is stored in the sql log files

    The failed attempt has the time and a line like "Login failed for user 'tmprm'"

    Steven

  • January 21, 2002 at 8:18 am

    #422367

    I looked in the SQL Log Files, but nothing there but my job competions. Do I need to stop/start the SQL Services after setting Audit level to Failure?



    - Vega

  • January 21, 2002 at 8:19 am

    #422368

    yes you will need to stop and restart the sql server.

    Steven

  • January 21, 2002 at 8:20 am

    #422369

    Sweet! Thanks! How about stopping the logging of all my jobs that run?



    - Vega

  • January 21, 2002 at 12:01 pm

    #422385

    Set each job to log on completion.

    Steve Jones

    steve@dkranch.net

  • January 21, 2002 at 3:13 pm

    #422407

    Another thing with the application log. You can set the max log file size and overwrite option, by right clicking on the appropriate log and setting those options. That would prevent you system shutting down.

    Tom Goltl

    ps. cbarlow are you formerly from Omaha?

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply