![]() You must set the state of an audit to the OFF option in order to make changes to an audit. You must specify at least one of the TO, WITH, or MODIFY NAME clauses when you call ALTER AUDIT. Passing the wrong type results in an error.Īpplies to: SQL Server 2012 (11.x) and later. No implicit string type conversion is performed for the predicate compare functions. Limitations are the lack of available physical memory or a number that is too large to be represented as a 64-bit integer.Įither an ANSI or Unicode string as required by the predicate compare. All fields can be audited except file_name and audit_file_offset. Audit fields are described in sys.fn_get_audit_file (Transact-SQL). Is the name of the event field that identifies the predicate source. Predicate expressions are limited to 3000 characters, which limits string arguments. Specifies the predicate expression used to determine if an event should be processed or not. Changing the state of a running audit (from ON to OFF) creates an audit entry that the audit was stopped, the principal that stopped the audit, and the time the audit was stopped.Ĭhanges the name of the audit. Use this option when maintaining a complete audit is more important than full access to the Database Engine.Īpplies to: SQL Server 2012 (11.x) and later.Įnables or disables the audit from collecting records. The audit continues to attempt to log events and resumes if the failure condition is resolved. Actions, which do not cause audited events can continue, but no audited events can occur. For more information, see SHUTDOWN.ĭatabase actions fail if they cause audited events. Use the option when an audit failure could compromise the security or integrity of the system. ![]() If the user does not have this permission, then the statement will fail and the audit will not be modified. The shutdown behavior persists even if the SHUTDOWN permission is later revoked from the executing login. The login executing the ALTER statement must have the SHUTDOWN permission within SQL Server. Use this option, when continuing operation of the Database Engine is more important than maintaining a complete audit.įorces the instance of SQL Server to shut down, if SQL Server fails to write data to the audit target for any reason. Selecting the continue option can allow unaudited activity, which could violate your security policies. Indicates whether the instance writing to the target should fail, continue, or stop if SQL Server cannot write to the audit log. Transact-SQL syntax conventions Syntax ALTER SERVER AUDIT audit_name For more information, see SQL Server Audit (Database Engine). ![]() Applies to: SQL Server Azure SQL Managed InstanceĪlters a server audit object using the SQL Server Audit feature. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |