This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 8%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hello,
Can anyone recommend a good auditing software for Azure SQL Database and Azure SQL Managed Instance? We're looking to audit DDL and permission changes at the database, object, and instance levels. The software that I've found either does not support these technologies or has a limited feature set. We're looking to be able to generate reports on demand of current permissions and emailed reports of daily changes.
Thanks.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 93%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENS%3C/text%3E%3C/svg%3E)
Thank you Navtej, I did see this and appeared to be a great way to enable the logs. I am having trouble envisioning how an easy to read daily report can be generated and emailed daily as an audit sign off. Can an immediate email be sent when a permission is changed? Is there a way to view a snapshot of permissions by user and group from instance level down to object level?
I guess I would need to see a PoC to determine whether it will work for us. When I looked at this last year, it appeared that all of the queries need to be developed and the knowledge of what needs audited is required. Many software packages already have done this work for you and you can be more confident that the server is being audited properly.
Navtej, is there a particular advantage for choosing to store the SQL Audit logs in either Azure Monitor or an Azure storage account? I'm also having a hard time finding information on how to generate daily report emails.
You can send the email through setting up of alerts in Azure Monitor - AzureSQL and Azure Managed Instance,
You can use the Log Analytics to run the queries in the Azure Monitor and then set up the alerts as well. I would definitely recommend doing the POC for testing this.
Let me know if you need any further information.
Regards
Navtej S
@Anon4343 Please let us know if you need further help regarding this.
I'm not sure yet. I've had to open a ticket with Microsoft because the security audit events aren't outputting to Azure Monitor. Once I can generate events, I can try creating alert emails based on queries. I am worried that the alerts are triggered based on a new event being created rather than being able to email a report of events generated in the last 24 hours.