Page:1/28
10/3/2005 3:52:47 PM
All Database Audits
Description
Allows auditing on all database administration, management, security and maintenance operations
For more information on database auditing, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Audit Type
All
Audit Type
User
Client IP
Client Port
Server IP
Server Port
Date Time
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
open cursor : cursor_eg_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
open cursor : cursor_eg_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
close cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8170
192.168.1.5
6868
8/21/2005 11:47:27 AM
SQL Query Text:
Logout:sa@8170
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
open cursor : cursor_eg_eg
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
close cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8171
192.168.1.5
6868
8/21/2005 11:47:30 AM
SQL Query Text:
Logout:sa@8171
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
set nocount on
Failed Transactions
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
exec getdate()
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
select @@servername
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
select * from authors
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
select * from publishers
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
select * from sales
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
declare @var float declare @count int select @var = 1 select @count = 1 while (@count < 3) begin select @var = log10(abs(pi()*rand())) select @count = @count + 1 end
Failed Transactions
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
/* an error request */ select name from badtablename
Successful root Logins
sa
192.168.1.7
8176
192.168.1.5
6868
8/21/2005 11:47:46 AM
SQL Query Text:
Logout:sa@penguin:8176
Page:2/28
10/3/2005 3:52:47 PM
Audit Type
User
Client IP
Client Port
Server IP
Server Port
Date Time
Successful root Logins
sa
192.168.1.7
8184
192.168.1.5
6868
8/21/2005 11:48:42 AM
SQL Query Text:
select * from sysusers
Successful root Logins
sa
192.168.1.7
8184
192.168.1.5
6868
8/21/2005 11:48:42 AM
SQL Query Text:
Logout:sa@8184
Successful root Logins
sa
192.168.1.7
8186
192.168.1.5
6868
8/21/2005 11:48:50 AM
SQL Query Text:
select uid, name from sysusers
Successful root Logins
sa
192.168.1.7
8186
192.168.1.5
6868
8/21/2005 11:48:50 AM
SQL Query Text:
Logout:sa@8186
Successful root Logins
sa
192.168.1.7
8188
192.168.1.5
6868
8/21/2005 11:48:56 AM
SQL Query Text:
create proc CT1 as update authors set au_lname=? where au_id=?
Successful root Logins
sa
192.168.1.7
8188
192.168.1.5
6868
8/21/2005 11:48:56 AM
SQL Query Text:
create proc CT1 as update authors set au_lname=? where au_id=?:Smith 341-22-1782
Successful root Logins
sa
192.168.1.7
8188
192.168.1.5
6868
8/21/2005 11:48:56 AM
SQL Query Text:
create proc CT1 as update authors set au_lname=? where au_id=?:Dull 427-17-2319
Successful root Logins
sa
192.168.1.7
8188
192.168.1.5
6868
8/21/2005 11:48:56 AM
SQL Query Text:
Logout:sa@8188
Successful root Logins
sa
192.168.1.7
8188
192.168.1.5
6868
8/21/2005 11:48:56 AM
SQL Query Text:
Logout:sa@8188
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
open cursor : cursor_eg_eg
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
fetch cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
close cursor : cursor_eg
Successful root Logins
sa
192.168.1.7
8191
192.168.1.5
6868
8/21/2005 11:49:03 AM
SQL Query Text:
Logout:sa@8191
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
delete from text_table
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
insert into text_table (t_index, the_text) values (5,"")
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
select the_text, t_index from text_table where t_index = 5
Successful root Logins
sa
192.168.1.7
8193
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
writetext bulk text_table.the_text 0x0000031200000000000000000002a6aa timestamp = 0x0000ffff0002a6aa
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
select t_index, the_text from text_table where t_index = 5
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
select t_index, the_text from text_table where t_index = 5
Successful root Logins
sa
192.168.1.7
8192
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
Logout:sa@penguin:8192
Successful root Logins
sa
192.168.1.7
8193
192.168.1.5
6868
8/21/2005 11:49:09 AM
SQL Query Text:
Logout:sa@penguin:8193
Successful root Logins
sa
192.168.1.7
8196
192.168.1.5
6868
8/21/2005 11:49:22 AM
SQL Query Text:
if exists (select * from sysobjects where name = "storename_proc") drop proc storename_proc
Successful root Logins
sa
192.168.1.7
8196
192.168.1.5
6868
8/21/2005 11:49:22 AM
SQL Query Text:
create proc storename_proc @stor_name varchar(40) as declare @lowered_name varchar(40) select @lowered_name = lower(@stor_name) + "%" select stor_name, stor_id, stor_address, city, state, postalcode,
Successful root Logins
sa
192.168.1.7
8196
192.168.1.5
6868
8/21/2005 11:49:22 AM
SQL Query Text:
set nocount on
Successful root Logins
sa
192.168.1.7
8196
192.168.1.5
6868
8/21/2005 11:49:22 AM
SQL Query Text:
select name,crdate from sysobjects where name="storename_proc"
Page:3/28
10/3/2005 3:52:47 PM
Audit Type
User
Client IP
Client Port
Server IP
Server Port
Date Time
Successful root Logins
sa
192.168.1.7
8196
192.168.1.5
6868
8/21/2005 11:49:22 AM
SQL Query Text:
Logout:sa@penguin:8196
Table Created
sa
192.168.1.7
8198
192.168.1.5
6868
8/21/2005 11:49:30 AM
SQL Query Text:
create table test_table(one char(10), two char(10))
Successful root Logins
sa
192.168.1.7
8198
192.168.1.5
6868
8/21/2005 11:49:30 AM
SQL Query Text:
insert bulk test_table
Successful root Logins
sa
192.168.1.7
8198
192.168.1.5
6868
8/21/2005 11:49:30 AM
SQL Query Text:
Logout:sa@penguin:8198
Successful root Logins
sa
192.168.1.7
8198
192.168.1.5
6868
8/21/2005 11:49:30 AM
SQL Query Text:
Logout:sa@penguin:8198
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
set nocount on
Failed Transactions
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
exec getdate()
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select @@servername
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from authors
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from publishers
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from sales
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
declare @var float declare @count int select @var = 1 select @count = 1 while (@count < 3) begin select @var = log10(abs(pi()*rand())) select @count = @count + 1 end
Failed Transactions
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
/* an error request */ select name from badtablename
Successful root Logins
sa
192.168.1.7
8203
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
Logout:sa@penguin:8203
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
set nocount on
Failed Transactions
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
exec getdate()
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select @@servername
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from authors
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from publishers
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from sales
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
declare @var float declare @count int select @var = 1 select @count = 1 while (@count < 3) begin select @var = log10(abs(pi()*rand())) select @count = @count + 1 end
Failed Transactions
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
/* an error request */ select name from badtablename
Successful root Logins
sa
192.168.1.7
8204
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
Logout:sa@penguin:8204
Successful root Logins
sa
192.168.1.7
8205
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
set nocount on
Failed Transactions
sa
192.168.1.7
8205
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
exec getdate()
Successful root Logins
sa
192.168.1.7
8205
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select @@servername
Successful root Logins
sa
192.168.1.7
8205
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text:
select * from authors
Page:4/28
10/3/2005 3:52:47 PM
Audit Type
User
Client IP
Client Port
Server IP
Server Port
Date Time
Successful root Logins
sa
192.168.1.7
8205
192.168.1.5
6868
8/21/2005 11:49:58 AM
SQL Query Text: