SQL server audit logs filtering is not working

Question

Hello,

I'm using SQL server management studio 18.11.1.
I've enabled the audit.
When I open the audit logs, I can see entries.
But when I try to filter based on dates or user or ... nothing is displayed.

Any idea?

Best regards.

Marc

Answer 1

Hi @Marc Coste ,

You can also use T-SQL to view the Audit Log. you can filter by adding a where statement after the statement below.

SELECT * FROM sys.fn_get_audit_file('F:\AuditTest\*.sqlaudit', DEFAULT, DEFAULT)  

To check if it is the problem of SSMS version, I also installed the latest version of SSMS, but my filter still works.
After executing the statement if there are any errors you can post it.

Best regards,
Seeya

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Marc Coste ,

Welcome to Microsoft Q&A!
Did you click this checkbox?

Best regards,
Seeya

Answer 3

Hello,

Yes for sure.

When I try to filter based on dates for example, no rows are returned. Even if I can see that events exist; same thing with users.
I've tried to the same in SQL logs and it works.

Best regards.

Marc

Answer 4

Hello,

The SQL request works.
I don't know why it doesn't work usin SSMS.

Thanks for your help.

Best regards.

Marc

Answer 5

Hi @Marc Coste ,

There should be a problem with SSMS.
Please refer to this article about how to Repair SQL Server Management Studio: https://www.prajwaldesai.com/repair-sql-server-management-studio/
If that doesn't work, you can post the question in the feedback site:
https://feedback.azure.com/d365community/forum/04fe6ee0-3b25-ec11-b6e6-000d3a4f0da0
Good luck for you.

Best regards,
Seeya