locked
Filter Audit Specification by Principal RRS feed

  • Question

  • Hi,

    I've a trace to capture all the activity of a user on a server, I'm using the audit schema object access event, and the trace is filtered on the users login.

    I would like to do this using audit specifications but would rather not set a database specification up for each database on the server.

    I was hoping to use a server audit specification such as

    CREATE SERVER AUDIT SPECIFICATION [Server_Database_Access_AuditSpecification]
    FOR SERVER AUDIT [Server_Database_Access]
    ADD (DATABASE_OBJECT_ACCESS_GROUP )

    But I am not able to add a principle name through the GUI, at the database audit specification level you would add "BY [domainname\username]" but this doesn't work for server audit specification.

    is it possible to filter by principal name at this level.

    thanks in advance 


    Sean

    Thursday, February 27, 2014 2:31 PM

Answers

All replies