Any folks here can show me some ideas. Windows level security auditing, successfully logins , failed logins, then use the SQL Server report server to publish daily. Now the problem is, how windows system logs the events, in what format, what files, any way I can transform these logs to tabular format, then performing SQL opertaions. Plus: For SQL server level logging, In log folder, there are physical files: errorlog, SQLAGENT LOG. and also SQL Server has the log parser to display the log, So what tables are related with these logs. Thanks ------------------ Bug explorer/finder/seeker/locator ------------------
I believe you can save the event viewer log to a spreadsheet in the fashion if you want it CSV or tabular format. On the SQL Server there log is not stored on any of the tables, only written directly to the flat file on the OS. Satya SKJ Microsoft SQL Server MVP Contributing Editor & Forums Moderator http://www.SQL-Server-Performance.Com This posting is provided AS IS with no rights for the sake of knowledge sharing.
So based on your answer, sql server log parser direct goes to the physical log files for parsing. Is there some intermediate forms of these sql server logs when log parser performing its job? ------------------ Bug explorer/finder/seeker/locator ------------------
Log parser is a tool from MS and you can get more information fromhttp://articles.techrepublic.com.com/5100-6329-5034923.html,http://www.microsoft.com/downloads/...37-14C7-40E3-820B-E7EE653C68C0&displaylang=en &http://www.sqlmag.com/articles/index.cfm?articleid=44848 here, as I have nothing much to shed light on this. Satya SKJ Microsoft SQL Server MVP Contributing Editor & Forums Moderator http://www.SQL-Server-Performance.Com This posting is provided AS IS with no rights for the sake of knowledge sharing.
Thank you so much, satya. Other folks have insight or example how to do this kind of security auditing and reporting. ------------------ Bug explorer/finder/seeker/locator ------------------
