ssms audit for azure db

Question

ssms audit for azure db

Anusha S Raj 21

Hi,

I have an azure Database which did not have audit enabled. Is there any way I can get the user login history or audits from system views or tables?

Answer accepted by question author

0 additional answers

Your answer

Answer 1

GeethaThatipatri-MSFT 29,587 Microsoft Employee Moderator

Hi, @Anusha S Raj Welcome to Microsoft Q&A, Thanks for posting your query.
Yes, you should be able to identify the specific query by providing the contains of the query in the 'statement' of Audit log fields by querying in log analytics.
For more information on querying log analytics on where you can find sample codes, please go through the link below:

AZURE SQL DB AND LOG ANALYTICS BETTER TOGETHER – PART #1 - Microsoft Tech Community

To find more information regarding the Audit log fields please go through the link below:

SQL Database audit log format - Azure SQL Database | Microsoft Learn

Hope the above information helps.

Please let me know if you are facing any issues,

you can enable the option from the portal in server blade under security.

Regards
Geetha

Anusha S Raj 21 Reputation points

2022-05-12T05:32:43.257+00:00

Hi @GeethaThatipatri-MSFT . Thanks for responding.

The above process that u have shared only works if audit and diagnostic settings are enabled. Unfortunately, I had not enabled both and hence wanted to see if there is any other way to get the user login history.
GeethaThatipatri-MSFT 29,587 Reputation points Microsoft Employee Moderator

2022-05-12T21:09:41.123+00:00

@Anusha S Raj I am sorry without auditing it is not possible. But you can look into active open connections by using sp_who2. in order to check with connection's history, it is not possible without auditing.
sp_who2 is basically a command you need to execute on Azure SQL DB to identify active open connections on DB. You can go through the link for reference:

Regards
Geetha
Anusha S Raj 21 Reputation points

2022-05-14T10:21:03.387+00:00

Thanks @GeethaThatipatri-MSFT for your response.

Share via

ssms audit for azure db

0 additional answers

Your answer