Using SQL Server Security Logs

Enabling security auditing on SQL Server will monitor and track activity to log files that can be viewed through Windows application logs or SQL Server Management Studio. SQL Server offers four security levels with regards to security auditing, as follows:

None— Disables auditing so no events are logged.

Successful Logins Only— Audits all successful login attempts.

Failed Logins Only— Audits all failed login attempts.

Both Failed and Successful Logins— Audits all login attempts.

Security auditing is set to Failed Logins Only by default. It is a best practice to configure security auditing to capture both failed and successful logins. At the very least, security auditing should be set to Failed Logins Only. ...

Get Microsoft SharePoint 2010 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.