Failed login attempts

  • HI. I was reading in BOL about the logging of failed login attemps:

    Log records for these events appear in the Windows application log, the SQL Server error log, or both, depending on how you configure logging for your instance of SQL Server.

    My question is how do you configure logging for the instance of sql server? Was this done when sql server was installed? I would like to check where the failed login attempts are going. 

    Juanita

     

  • You can see the settings by looking at the server properties (Right Click the sever in EM). Look at the security tab. This will show the Audit Level. You can choose what to log.

    Then to review look at the SQL Server Log under management.

  • HI. I can see where you set what type of loggins you log and how to view the sql logs but the documentation talks about setting somewhere in sql server where you want this logging to go to, either the windows log, sql logs or both.  What I  am trying to locate is where that setting is set.

     

    Juanita

  • When login auditing is configured, login events are records in the SQL Server error log and the Windows Application Event log. 

    This is done automatically.

     

    Lewis DiFelice 

  • Thank you. It read as if the user configures that themselves as to  where the logging is done. But if it's done automatically that is fine with me.

    Thanks for help!

    Juanita

  • Anyone with sysadmin rights can do this... meaning you if you are the user with such rights. You have to handle this through Enterprise Manager unless you want to go delving into the Windows registry. Trust me, EM is the way to go.

    K. Brian Kelley
    @kbriankelley

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply