Audit Logins - Failed/Successful


  • Noob to auditing.  I need to audit failed and successful login attempts.  I'm confused as to where in SQL Server to enable it.  Is it simply checking the radio button for "Both failed and successful logins" on the Security page of the server properties?  Or is it the Security|Audits or Security|Server Audit Specifications objects under the server instance?  or is it Security|Database Audit Specifications object under a specific database?  Thanks for your guidance.
    Monday, May 14, 2018 10:52 PM

All replies

  • Hi,

    if you activate the radio button in the security page, the failed and successful logins are logged to sql server ERRORLOG.

    If you like to use the audit, the logins are logged to a special audit file.

    It is your decission.

    Best regards,


    Tuesday, May 15, 2018 6:30 AM
  • Hi District,

    To monitor SQL Server Database Engine login activity, you can simply check the radio button for "Both failed and successful logins" on the security page of the server properties.

    And login auditing can be configured to write to the error log. Also you must restart SQL Server before this option will take effect.

    For more information, please have a look:

    Configure Login Auditing (SQL Server Management Studio)


    Pirlo Zhang

    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact

    Tuesday, May 15, 2018 7:01 AM
  • Start with that simple setting and see if it meet your requirements. You would grab the recods in either the errorlog file or the eventlog.

    If above doesn't meet your requirements, then look at Sever Audit.

    I.e., always go for the most simple solution that meet your requirement. :-)

    Tibor Karaszi, SQL Server MVP (Web Blog)

    Tuesday, May 15, 2018 8:58 AM