SQL Auditing Foundation

Question

SQL Auditing Foundation

Jay@Work

SSCrazy

Points: 2476
More actions
January 30, 2012 at 3:55 pm

#267356

I'm interested in looking into auditing, the servers we run here are standard edition.
I've read that 2008 standard only supports "SQL Auditing Foundation" but I can't find anywhere that specifies what that does/not give you that the Enterprise edition does.

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

jnuqui Default port Points: 1475 More actions · Answer 1

I got curious on what the hell is this SQL Auditing Foundations thingy which only the scope of SQL Server 2008 Standard Edition.

Upon Googling here's what I found. 🙂

SQL Auditing Foundation just refers to the C2 stuff that was already in

2005. The new Auditing feature in 2008, which is different, is only in the

enterprise sku.

and What the hell is the C2 Stuff being mention here. as per msdn

C2 audit mode can be configured through SQL Server Management Studio or with the c2 audit mode option in sp_configure. Selecting this option will configure the server to record both failed and successful attempts to access statements and objects. This information can help you profile system activity and track possible security policy violations.

you'll found more information on this site.

===============================================================

"lets do amazing" our company motto..

johnitech.itech Hall of Fame Points: 3252 More actions · Answer 2

:hehe:

A very good information about sql auditing below

http://www.simple-talk.com/sql/database-administration/sql-server-audit-magic-without-a-wizard/[/url]

SQL Server 2008 provides comprehensive data auditing to help organizations monitor all events at the server and database levels, and scale-out auditing across the enterprise. Auditing is important to bwin as the gaming industry is subject to an array of regulations.

===========================================

f one was to make a list of all single-word phrases that will make any database administrator bang their head on their desk surely that list would include the word “audit”. No doubt that the idea of an audit, as well as a visit from auditor, has caused more than one painful experience for most database administrators. An auditor once insisted that I should remove the ‘sa’ account on a SQL 2000 instance because “using that account is bad, and you shouldn’t be doing that”. Well, I wasn’t using it, as I have always used windows authentication where possible, which isn’t always the case. He was just looking at a list of logins for the instance and immediately focused on that account; he told me not to use it, and then asked me how soon I would be able to get rid of it.

===============================================================

SQL 2008 Enterprise version allows for you to quickly and easily configure SQL Server Auditing to automate your auditing needs. The simple explanation for how this works is as follows:

Create a SQL Server Audit object

Create an Audit Specification (can be at the server or database level)

Turn it on

It really is that easy to get it up and running. The hard part will come later on when someone stops by to ask for the details surrounding specific events, but even that is not difficult to provide due to the inclusion of an audit log reader.

Jay@Work SSCrazy Points: 2476 More actions · Answer 3

Thanks all, I guess what I was looking for was a sort of checklist of both versions.

FeatureX FeatureY FeatureZ

Standard x x

Enterprise x x x

I was looking at auditing for the purpose of tracking changes so they could be sent elsewhere (DML changes not DDL or access denied)