Dropping Audit Sessions

Question

Dropping Audit Sessions

Steve Jones - SSC Editor

SSC Guru

Points: 736212
More actions
October 27, 2016 at 11:49 pm

#77308

Comments posted to this topic are about the item Dropping Audit Sessions

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

Rune Bivrin SSCrazy Eights Points: 8512 More actions · Answer 1

Not quite sure I agree with the answer. There is a difference between what I must do and what I should do. According to the quoted article you do not have to stop the audit specification first, merely the audit.

Just because you're right doesn't mean everybody else is wrong.

sipas Hall of Fame Points: 3828 More actions · Answer 2

I disagree with the answer - the question says "I find that the audit is no longer needed...", not that the audit specification is no longer needed - it could be mapped to another server audit in the future.

Joseph-411461 Ten Centuries Points: 1228 More actions · Answer 3

Even if you don't need the specification any more, you don't have to delete it. Actually, you even shouldn't: the audit data aren't deleted either, and once you might want to have a look at the specification how they were created.

George Vobr SSCrazy Eights Points: 9996 More actions · Answer 4

Good question, thanks Steve. To answer, I used this link:

https://books.google.cz/books?id=SbwLJTD-UuYC&pg=PA723&lpg=PA723&dq=DROP+SERVER+AUDIT&source=bl&ots=3sfsk4v65o&sig=OtdEj_y98YnQHkOOJ3UekKMW9aY&hl=cs&sa=X&ved=0ahUKEwjFj7Xy__3PAhWBuRoKHXT2At4Q6AEIPDAE#v=onepage&q=DROP%20SERVER%20AUDIT&f=false

Steve Jones - SSC Editor SSC Guru Points: 736212 More actions · Answer 5

My mistake. I checked the wrong box. I'll award back points.

The audit spec is separate from the audit itself. You do need to stop/disable the audit session before you can drop it. However, the Server Audit Specification can continue to run and live as an orphaned session.

Koen Verbeeck SSC Guru Points: 259105 More actions · Answer 6

Thanks for the question.

Need an answer? No, you need a question
My blog at https://sqlkover.com.
MCSE Business Intelligence - Microsoft Data Platform MVP

TomThomson SSC Guru Points: 104773 More actions · Answer 7

Steve Jones - SSC Editor (10/31/2016)
My mistake. I checked the wrong box. I'll award back points.
The audit spec is separate from the audit itself. You do need to stop/disable the audit session before you can drop it. However, the Server Audit Specification can continue to run and live as an orphaned session.

well, you corrected the explanation and awarded back points. You didn't fic it so that people who subsequantly got it right would gat a point though, if someone picks the correct answer it's still marked wrong and gives no points.

Tom