|
Home > Archive > MS SQL Server security > November 2005 > SQL Error Log is not logging events properly
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SQL Error Log is not logging events properly
|
|
| Andy S. 2005-11-11, 8:23 pm |
| I have a server where the sql error log is constantly missing events.
Usually you see when processes were killed, backups, server reboots, etc. I
have a SQL 2000 SP 3a server that is logging when databases start, a few of
the database backups, but nothing about processes being killed. The only
thing I can think of is that auditing is not turned on. Any suggestions? I
tried cycling the error log, it put an entry that the error log had been
cycled, then all the SQL server info. I am waiting to see if that does
anything.
| |
| Andy Davis 2005-11-18, 3:23 am |
| Hi,
its really strange , yeah please look at C2 Auditing :
http://msdn.microsoft.com/library/en-us/adminsql/ ad_security_46av.asp
http://msdn.microsoft.com/library/en-us/adminsql/ ad_config_09yd.asp
http://msdn.microsoft.com/library/en-us/adminsql/ ad_security_2ard.asp
http://support.microsoft.com/default.aspx? scid=kb;en-us;93362
http://www.microsoft.com/technet/security/ prodtech/dbsql/sqlc2.mspx
http://www.microsoft.com/technet/security/ prodtech/dbsql/sql2kaud.mspx
--
Andy Davis
Active Crypt Team
--------------------------------------------------------------------------------------------SQL Server Encryption Decryption Software
http://www.activecrypt.com
"Andy S." wrote:
> I have a server where the sql error log is constantly missing events.
> Usually you see when processes were killed, backups, server reboots, etc. I
> have a SQL 2000 SP 3a server that is logging when databases start, a few of
> the database backups, but nothing about processes being killed. The only
> thing I can think of is that auditing is not turned on. Any suggestions? I
> tried cycling the error log, it put an entry that the error log had been
> cycled, then all the SQL server info. I am waiting to see if that does
> anything.
>
>
>
|
|
|
|
|