I have setup some SQL Server Audits and Specifications but they are not logging.

Question

I have setup some SQL Server Audits and Specifications but they are not logging.

The only Server-Level Audit Action group that log are Batch Started and Batch Completed. I am trying to log to a file, my server is version 2019.

These are the Server-Level Audit Action groups I have tried using, they are listed with the required logging criteria.

Addition of new users, especially privileged users – Captured by Server-Level Audit Action group SERVER_PERMISSION_CHANGE_GROUP, SERVER_OPERATION_GROUP and SERVER_OBJECT_PERMISSION_CHANGE_GROUP

Changes to user roles or privileges  – Captured by Server-Level Audit Action group SERVER_PERMISSION_CHANGE_GROUP, SERVER_OPERATION_GROUP and SERVER_OBJECT_PERMISSION_CHANGE_GROUP

Attempts to elevate user privileges  – Captured by Server-Level Audit Action groups SERVER_PERMISSION_CHANGE_GROUP,               SERVER_OBJECT_PERMISSION_CHANGE_GROUP, DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP, DATABASE_OBJECT_PERMISSION_CHANGE_GROUP,    DATABASE_PERMISSION_CHANGE_GROUP,          SERVER_OBJECT_OWNERSHIP_CHANGE_GROUP

Answer 1

Hi，Nick Dorgan

Addition of new users, especially privileged users – Captured by Server-Level Audit Action group SERVER_PERMISSION_CHANGE_GROUP, SERVER_OPERATION_GROUP and SERVER_OBJECT_PERMISSION_CHANGE_GROUP Changes to user roles or privileges  – Captured by Server-Level Audit Action group SERVER_PERMISSION_CHANGE_GROUP, SERVER_OPERATION_GROUP and SERVER_OBJECT_PERMISSION_CHANGE_GROUPSERVER_PRINCIPAL_CHANGE_GROUP

Hello, the audit specification you are using does not meet your needs. Please use the following specification. Additionally, please refer to the official documentation for audit specifications.SERVER_PRINCIPAL_CHANGE_GROUPSERVER_ROLE_MEMBER_CHANGE_GROUP

Best Regards,

Mikey Qiao

---

If you're satisfied with the answer, don't forget to "Accept it," as this will help others who have similar questions to yours.