I am trying to test Server Auditing and it is really working so nicely. A lot of articles and examples are available and it's very straightforward. The output shows all the information needed as well, what was the change, who did it, BUT not where the change come from. (Workstation or even IP address?)
We have an application that runs under an application service account that makes changes to the database. The application can be run from different hosts and it would really be nice if the audit can show this information as well.
Am i just missing this information? or is there just an audit setting I need to turn on as well to include this information?
Thanks a lot for any inputs.