Hello
I'm new to sqlserver - we have a sql server on linux and we need audit enable,
i followed the steps as per https://solutioncenter.apexsql.com/auditing-select-statements-on-sql-server/
and i have created server rules per database, and added the users that I need audited to the proper server rules and enabled audit,
however, when the audited ID goes in and executes, insert, update , select delete which are the commands we wanted tracked i dont see it
also how can i extract the data been audited ?
TIA
also when i run this command to gather info i dont see nothing and i deleted tables
SELECT
event_time ,
session_server_principal_name AS UserName ,
server_instance_name ,
database_name ,
object_name ,
statement
FROM sys.fn_get_audit_file('/mssql/audit/*.sqlaudit', DEFAULT, DEFAULT)
WHERE
action_id = 'DL'
AND
database_name = 'testaudit';