Questions tagged [audit-logging]

Audit-logging is the practice of keeping records of system activity

Audit-logging is the practice of keeping records of system activity. Audit logging does not contain information about the technical operation of a system, like print statements, but rather keeps track of discrete events that occur within a system. Examples are "User X accessed data Y at Time T", etc.

389 questions
1
vote
1 answer

Detect the EventClass Audit Login/Logout in c#

I need to monitor an application when users log on and logoff in SQL SERVER, as sometimes the application logs unexpectedly, and I need to know because I audited the login and logout. When I use SQL Server Profiler, EventClass column appear "Audit…
1
vote
3 answers

Audit Logging using ASP.NET MVC 4 ActionFilter

I'm building a web app using ASP.NET MVC 4, with data storage provided by T-SQL database via Entity Framework. I'm integrating audit logging as I go, and I'd like to provide a nice human-readable summary of the action, so that I can present a…
anaximander
  • 7,083
  • 3
  • 44
  • 62
1
vote
1 answer

Is it possible to audit the changed values using SQL Server Auditing?

Is it possible to audit the changed values using SQL Server Auditing for stored procedures? Note: I'm not talking about CDC. I've got basic auditing working, writing to the security log. If I run an INSERT statement, I get a 33205 event contain…
ssg31415926
  • 1,037
  • 2
  • 13
  • 21
1
vote
0 answers

Can one search the SQL Server audit log with keyword and/or wildcard search?

Using SQL Server 2012. How can I do this? Thank you.
Sarah
  • 133
  • 1
  • 2
  • 7
1
vote
0 answers

Dealing with complex properties with Entity Framework's ChangeTracker

I'll try and be as descriptive as I can in this post. I've read a dozen or more SO questions that were peripherally related to my issue, but so far none have matched up with what's going on. So, for performing audit-logging on our database…
1
vote
2 answers

Need some help in creating a query in SQL?

I have 6 tables: Staff ( StaffID, Name ) Product ( ProductID, Name ) Faq ( FaqID, Question, Answer, ProductID* ) Customer (CustomerID, Name, Email) Ticket ( TicketID, Problem, Status, Priority, LoggedTime, CustomerID* , ProductID* ) …
0
votes
1 answer

inserting audit logging entry for user login

I am using the grails 1.3.7 with audit logging plugin. I want to capture user login event like "user:PSam logged in at .." in the logs and since plugin does not have onLoad event defined, I am adding it to the domain classes and populate my own…
pri_dev
  • 11,315
  • 15
  • 70
  • 122
0
votes
2 answers

using audit logging plugin in grails

I am planning to used audit logging plugin in grails and just wanted to know something basic. We have to create the Audit domain class and persist data into this table on various events from the domain class manually right? I mean the plugin does…
pri_dev
  • 11,315
  • 15
  • 70
  • 122
0
votes
1 answer

Grails onLoad() audit

I see that grails-audit plugins provide way of logging onCreate() onUpdate() events, but I also need to track onLoad() events. Is there any standard way to do it using any plugin? Or I need to implement it myself?
Milkywayfarer
  • 910
  • 1
  • 9
  • 25
0
votes
0 answers

KQL for detecting 'add group' and then subsequent ' add member to group'

I am fairly early on in my KQL journey and I have set myself a task. I want to create a query that detects when a new group is created and then a new user is added to said group. I can get the info I want for each operation easily but how to combine…
DB67
  • 1
0
votes
0 answers

SQL Audit including SCHEMA_OBJECT_CHANGE_GROUP recording audit record for every bulk insert

Enabled SQL Audit on an Azure SQL Managed Instance with the intent to capture DDL changes to tables, sprocs, functions etc. Upon testing discovered that SCHEMA_OBJECT_CHANGE_GROUP captures audit data for bulk inserts (it also captures truncate…
Danny
  • 1
  • 1
0
votes
1 answer

Load Azure SQL database audit logs into Azure SQL database

My preferred location to review database audit logs is in a database, an Azure database to be specific. To be even more specific, I would like to review my Azure database audit logs for my Azure database in that same Azure database. How do I…
StinkySocks
  • 812
  • 1
  • 13
  • 20
0
votes
0 answers

get current kubernetes logged in user with kprobe

I want to get currently logged in user for auditing. for example I want to find which user executed a malicious caommand in k8s pod. there is a tool that I can define some policy that can works with kprobe. Is there anyway to get user by kprobe? I…
0
votes
1 answer

Enable SQL MI logs related database drop/delete activity

We have an Azure SQL MI having number of databases on it . We have to enable audit logs of SQL MI from diagnostic settings and also enabled logs by executing queries on MI and sending those logs to event hub. We are getting up logs (select, Execute)…
0
votes
0 answers

How can we track down who modified the SQL User Login Permission / User Mapping and etc

We are currently experiencing permission issue with our SQL account which we already set the permission needed, but suddenly the access was being removed. How can we identify who, how, when removed the permission. We just added back the permission…