How to detect suspicious sessions

Yuttapat Permpat 0 Reputation points
2023-02-01T03:44:47.18+00:00

I'm using sql server and there are many sessions running during off hours. and unable to view the Log. Would like a method or the program will record the session during the time it is running. enter image description here

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
14,482 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,714 questions
{count} votes

3 answers

Sort by: Most helpful
  1. LiHongMSFT-4306 30,671 Reputation points
    2023-02-01T06:36:07.7666667+00:00

    Hi @Yuttapat Permpat

    You could use SQL Server extended events to collect data needed to monitor and troubleshoot problems in SQL Server.

    Please refer to this doc: Quickstart: Extended events in SQL Server.

    Best regards,

    Cosmog Hong


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our Documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Limitless Technology 44,541 Reputation points
    2023-02-02T09:09:17.7966667+00:00

    Hello there,

    The SQL Server Audit object collects a single instance of server or database-level actions and groups of actions to monitor. The audit is at the SQL Server instance level. You can have multiple audits per SQL Server instance.

    When you define an audit, you specify the location for the output of the results.

    You can record server audit action groups per-instance, and either database audit action groups or database audit actions per database. The audit event will occur every time that the auditable action is encountered.

    SQL Server Audit (Database Engine) https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-database-engine?view=sql-server-ver16

    Hope this resolves your Query !!

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments No comments

  3. Limitless Technology 44,541 Reputation points
    2023-02-02T09:09:27.0766667+00:00

    Double post

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.