locked
Is there a way to get the login failure/success events of SQL Server 2008/2014 in windows security logs? RRS feed

  • Question

  • As we are in the process of integrating this in a monitoring software which would extract the  security logs.

    aa



    • Edited by Asif_DBA Wednesday, May 27, 2015 12:35 PM
    Wednesday, May 27, 2015 12:34 PM

Answers

  • Hello - By default whatever goes into SQL Server error log also goes into Windows event viewer. So if you enable Audit for Failed & Success Logins then they will also figure in Event viewer with the event ID 18453 for Success Login and 18456 for Failed Login (SQL Server 2008)

    To configure Success & Failed Login, refer the screen below:

    (Basically right click on your instance --> properties --> security)


    Good Luck!
    Please Mark This As Answer if it solved your issue.
    Please Vote This As Helpful if it helps to solve your issue

    Wednesday, May 27, 2015 12:51 PM
  • They are already logged in the Windows Application log.  The Security log is for Windows security.

    Please see:

    http://www.mssqltips.com/sqlservertip/1735/auditing-failed-logins-in-sql-server/

    Wednesday, May 27, 2015 12:52 PM

All replies

  • Hello - By default whatever goes into SQL Server error log also goes into Windows event viewer. So if you enable Audit for Failed & Success Logins then they will also figure in Event viewer with the event ID 18453 for Success Login and 18456 for Failed Login (SQL Server 2008)

    To configure Success & Failed Login, refer the screen below:

    (Basically right click on your instance --> properties --> security)


    Good Luck!
    Please Mark This As Answer if it solved your issue.
    Please Vote This As Helpful if it helps to solve your issue

    Wednesday, May 27, 2015 12:51 PM
  • They are already logged in the Windows Application log.  The Security log is for Windows security.

    Please see:

    http://www.mssqltips.com/sqlservertip/1735/auditing-failed-logins-in-sql-server/

    Wednesday, May 27, 2015 12:52 PM