C-2 and other auditing

  • SQL Server 2000 SE SP4 WIndows 2000 SP4.

    We have been requested to monitor a client database to find out who are making changes to database (By creating a log file) including inserts, deletes, updates and even DBA changes.

    We need the statament run, who ran it and from where it was ran.

    I know that there are some third party tools out there. Does any one doing any auditing ?. If so, what is the best tool to do it ?

    If I use C-2 Auditing, what is the performance hit (At least an estimate) ? Can I do the monitoring only on 1 database and not the others ?

    Any suggestions are welcome.................Thanks.

  • this type of auditing is not simple to implement, I have used C2 but can't remember what impact it had on the server. There are some commercial products available, sorry can't remeber the names but they were quite expensive, say £15k + and often needed another sql server as a repository ( more license costs ) Cheap solutions use triggers which will likely bring your server to its knees.

    It's easier in sql 2005, I never found a cheap efficient solution for sql 2000.

    [font="Comic Sans MS"]The GrumpyOldDBA[/font]
    www.grumpyolddba.co.uk
    http://sqlblogcasts.com/blogs/grumpyolddba/

  • These are some of them but I am not sure about any of them creating a log file that can be archived/viewed in need. I would do the C-2 auditing but there are other client's databases on the server and can't have the C-2 impact on those.................How is it done on SQL Server 2005 ?

    http://www.lumigent.com/products/auditdb.html

    http://www.apexsql.com/sql_tools_audit.asp

    http://www.krell-software.com/omniaudit/index.asp

    http://www.rlpsoftware.com/mainframe.asp?contents=SQLLog.asp&mainmenu=SQLLog&submenu=Info

    http://www.upscene.com/index.htm?./products/audit/mssqllm_main.htm

  • you can use dml triggers which are database wide.

    There wasa product I saw a demo of which used a sniffer to capture sql going to the server, so it didn't impact the box - quite impressive might have been called something like sql guardian.

    Lumigent product is excellent but was expensive, evaluated it.

    [font="Comic Sans MS"]The GrumpyOldDBA[/font]
    www.grumpyolddba.co.uk
    http://sqlblogcasts.com/blogs/grumpyolddba/

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply