March 8, 2022 at 10:58 am
In our Onprem SQL server, we have enabled "Both successful and failed login" and Splunk can consume the sql log from the log folder.
Is there a way to do similar setup for SQL Managed instance. I'm trying to find a way to get the login audit, with minimal impact.
Below Microsoft link says we have to create Server Audit event and redirect it to Blob storage. Is there a way to do this without creating audit event.
https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/auditing-configure#createspec
Thanks inadvance.
March 9, 2022 at 7:29 am
Have a look at my little article "Logon monitoring in SQL Server and Azure Managed Instances - Adopting Extended Events"
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
March 14, 2022 at 1:43 pm
Thankyou, is there a way to enable "Both Successful and Failed Logins" under server/instance properties for SQL Managed Instance.
For SQLserver, enabling this would require a restart. In SQL MI, it just resets back to failed login when I tried to enable.
I couldn't find any link about SQL MI supporting or not supporting it.
March 15, 2022 at 10:33 am
indeed that setting reverses.
btw the errorlog file is so polluted with SQLMI loggings of backups etc, and are not persisted over failovers
Johan
Learn to play, play to learn !
Dont drive faster than your guardian angel can fly ...
but keeping both feet on the ground wont get you anywhere :w00t:
- How to post Performance Problems
- How to post data/code to get the best help[/url]
- How to prevent a sore throat after hours of presenting ppt
press F1 for solution, press shift+F1 for urgent solution 😀
Need a bit of Powershell? How about this
Who am I ? Sometimes this is me but most of the time this is me
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply