mirror of
https://dev.azure.com/effectory/Survey%20Software/_git/Cloud%20Engineering
synced 2026-02-27 18:52:18 +01:00
Merged PR 57105: setup log analytics for sql01 prod
setup log analytics for sql01 prod
This commit is contained in:
Jurjen Ladenius
562
SQL/Auditing/sqlserver01prod - log analytics.sql
Normal file
562
SQL/Auditing/sqlserver01prod - log analytics.sql
Normal file
@@ -0,0 +1,562 @@
|
||||
CREATE SERVER AUDIT [sql01audit_loganalytics] TO EXTERNAL_MONITOR;
|
||||
GO
|
||||
|
||||
-- Create server specification
|
||||
CREATE SERVER AUDIT SPECIFICATION [sql01audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (FAILED_LOGIN_GROUP),
|
||||
ADD (LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_LOGIN_GROUP)
|
||||
WITH (STATE=ON);
|
||||
GO
|
||||
|
||||
-- Set state on
|
||||
ALTER SERVER AUDIT [sql01audit_loganalytics] WITH (STATE = ON);
|
||||
GO
|
||||
|
||||
|
||||
|
||||
|
||||
USE [ChangeLog]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [ChangeLog_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory CM]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_CM_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory Live]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Live_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory Project]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Project_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory Questionbase]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
----------------------------
|
||||
|
||||
USE [Effectory Response Center]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory Response MRT import]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Effectory Response Queue]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [esm_wh]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [esm_wh_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [ktv_wh]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [ktv_wh_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [MRT Reporting Data]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Personeelsadministratie]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [PMSoftware]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [PMSoftware_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Teleform_V16_5]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Teleform_V16_5_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
USE [Teleform109]
|
||||
GO
|
||||
|
||||
CREATE DATABASE AUDIT SPECIFICATION [Teleform109_audit_loganalytics]
|
||||
FOR SERVER AUDIT [sql01audit_loganalytics]
|
||||
ADD (DATABASE_OBJECT_ACCESS_GROUP),
|
||||
ADD (SCHEMA_OBJECT_ACCESS_GROUP),
|
||||
ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
|
||||
ADD (BATCH_COMPLETED_GROUP),
|
||||
ADD (BACKUP_RESTORE_GROUP),
|
||||
ADD (BATCH_STARTED_GROUP),
|
||||
ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (USER_CHANGE_PASSWORD_GROUP),
|
||||
ADD (USER_DEFINED_AUDIT_GROUP),
|
||||
ADD (SCHEMA_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_OPERATION_GROUP),
|
||||
ADD (LEDGER_OPERATION_GROUP),
|
||||
ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
|
||||
ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
|
||||
ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
|
||||
ADD (DATABASE_CHANGE_GROUP),
|
||||
ADD (DATABASE_OBJECT_CHANGE_GROUP),
|
||||
ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
|
||||
ADD (AUDIT_CHANGE_GROUP),
|
||||
ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DATABASE_LOGOUT_GROUP),
|
||||
ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
|
||||
ADD (DBCC_GROUP),
|
||||
ADD (DATABASE_PERMISSION_CHANGE_GROUP)
|
||||
WITH (STATE = ON)
|
||||
GO
|
||||
|
||||
|
||||
Reference in New Issue
Block a user