SQL server audit logs filtering is not working

Marc Coste 21 Reputation points
2022-04-28T12:22:17.977+00:00

Hello,

I'm using SQL server management studio 18.11.1.
I've enabled the audit.
When I open the audit logs, I can see entries.
But when I try to filter based on dates or user or ... nothing is displayed.

Any idea?

Best regards.

Marc

SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
12,765 questions
{count} votes

Accepted answer
  1. Seeya Xi-MSFT 16,441 Reputation points
    2022-04-29T06:46:13.227+00:00

    Hi @Marc Coste ,

    You can also use T-SQL to view the Audit Log. you can filter by adding a where statement after the statement below.

    SELECT * FROM sys.fn_get_audit_file('F:\AuditTest\*.sqlaudit', DEFAULT, DEFAULT)  
    

    To check if it is the problem of SSMS version, I also installed the latest version of SSMS, but my filter still works.
    After executing the statement if there are any errors you can post it.

    Best regards,
    Seeya


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

4 additional answers

Sort by: Most helpful
  1. Seeya Xi-MSFT 16,441 Reputation points
    2022-04-29T03:19:16.497+00:00

    Hi @Marc Coste ,

    Welcome to Microsoft Q&A!
    Did you click this checkbox?
    197520-image.png

    Best regards,
    Seeya

    0 comments No comments

  2. Marc Coste 21 Reputation points
    2022-04-29T05:46:32.227+00:00

    Hello,

    Yes for sure.

    When I try to filter based on dates for example, no rows are returned. Even if I can see that events exist; same thing with users.
    I've tried to the same in SQL logs and it works.

    Best regards.

    Marc

    0 comments No comments

  3. Marc Coste 21 Reputation points
    2022-04-29T09:44:56.263+00:00

    Hello,

    The SQL request works.
    I don't know why it doesn't work usin SSMS.

    Thanks for your help.

    Best regards.

    Marc

    0 comments No comments

  4. Seeya Xi-MSFT 16,441 Reputation points
    2022-04-29T09:53:19.11+00:00

    Hi @Marc Coste ,

    There should be a problem with SSMS.
    Please refer to this article about how to Repair SQL Server Management Studio: https://www.prajwaldesai.com/repair-sql-server-management-studio/
    If that doesn't work, you can post the question in the feedback site:
    https://feedback.azure.com/d365community/forum/04fe6ee0-3b25-ec11-b6e6-000d3a4f0da0
    Good luck for you.

    Best regards,
    Seeya

    0 comments No comments