sp_syspolicy_set_log_on_success (Transact-SQL)
Specifies whether successful policy evaluations are logged in the Policy History log for Policy-Based Management.
Transact-SQL Syntax Conventions
Syntax
sp_syspolicy_set_log_on_success [ @value = ] value
Arguments
[ @value= ] value
Determines whether successful policy evaluations are logged. value is sqlvariant, and can be one of the following values:0 or 'false' = Successful policy evaluations are not logged.
1 or 'true' = Successful policy evaluations are logged.
Return Code Values
0 (success) or 1 (failure)
Remarks
You must run sp_syspolicy_set_log_on_success in the context of the msdb system database.
When value is set to 0 or to 'false', only failed policy evaluations are logged.
Permissions
Requires membership in the PolicyAdministratorRole fixed database role.
Security Note |
---|
Possible elevation of credentials: Users in the PolicyAdministratorRole role can create server triggers and schedule policy executions that can affect the operation of the instance of the Database Engine. For example, users in the PolicyAdministratorRole role can create a policy that can prevent most objects from being created in the Database Engine. Because of this possible elevation of credentials, the PolicyAdministratorRole role should be granted only to users who are trusted with controlling the configuration of the Database Engine. |
Examples
The following example enables the logging of successful policy evaluations.
EXEC msdb.dbo.sp_syspolicy_set_log_on_success @value = 1;
GO