spool sql logs to event viewer

  • Is there an easy way to spool sql logs to the event viewer?

  • Looking to get shot by the NT Admin are we?

    John Zacharkan


    John Zacharkan

  • Can elaborate a more?

  • Actually, it was the nt admin who requested it. He asked me to turn on auditing in sql server to log failed login attempts. This writes to the sql log but it easier for him to manage it if everything writes to the event viewer.

  • Ok I'm confused.

    On the database server open up Event viewer, under Security, look for failure audit you should see failed attempts to login, such as:

    1/22/2003 11:18:58 AM Security Failure Audit Logon/Logoff 529NT AUTHORITY \SYSTEMServername "Logon Failure:

    Reason:Unknown user name or bad password

    User Name:USER

    Domain:DOMAIN

    Logon Type:3

    Logon Process:KSecDD

    Authentication Package:MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

    Workstation Name:\\station1 "

    John Zacharkan


    John Zacharkan

  • It seems to audit NT authetication failures but it did not log failed SQL logins?

    I just ried it.

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply