Share via

Audit on database sqlserver on Linux per database

helena Matos 61 Reputation points
2020-10-26T18:24:35.17+00:00

Hello
I'm new to sqlserver - we have a sql server on linux and we need audit enable,
i followed the steps as per https://solutioncenter.apexsql.com/auditing-select-statements-on-sql-server/
and i have created server rules per database, and added the users that I need audited to the proper server rules and enabled audit,
however, when the audited ID goes in and executes, insert, update , select delete which are the commands we wanted tracked i dont see it
also how can i extract the data been audited ?
TIA
also when i run this command to gather info i dont see nothing and i deleted tables
SELECT
event_time ,
session_server_principal_name AS UserName ,
server_instance_name ,
database_name ,
object_name ,
statement
FROM sys.fn_get_audit_file('/mssql/audit/*.sqlaudit', DEFAULT, DEFAULT)
WHERE
action_id = 'DL'
AND
database_name = 'testaudit';

Community Center | Not monitored
0 comments No comments

Answer accepted by question author

Sharon Zhao-MSFT 25,771 Reputation points Microsoft External Staff
2020-10-27T02:28:39.52+00:00

@helena Matos ,
As we are mainly responsible for general issue of Microsoft Teams for linux. Your question which is involved in Linux is not included in Teams. I would remove the office-teams-linux-itpro tag and add the not-supported tag. Hope you get better response.

Was this answer helpful?

0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.