Azure sql auditing scripts and new cosmos role for _pim_cosmos_ users #98329 #98330 #98328 #98681

Custom roles/Cosmos DB List Keys.json

@@ -0,0 +1,22 @@
+{
+  "id": "/providers/Microsoft.Authorization/roleDefinitions/01032560-a033-4a7e-977d-c360b71b9217",
+  "properties": {
+      "roleName": "Cosmos DB List Keys",
+      "description": "Lets you list keys for Azure Cosmos DB accounts. Used for PIM cosmos roles.",
+      "assignableScopes": [
+          "/providers/Microsoft.Management/managementGroups/e9792fd7-4044-47e7-a40d-3fba46f1cd09"
+      ],
+      "permissions": [
+          {
+              "actions": [
+                  "Microsoft.DocumentDB/databaseAccounts/readonlyKeys/*",
+                  "Microsoft.DocumentDB/databaseAccounts/listKeys/*",
+                  "Microsoft.DocumentDB/databaseAccounts/listConnectionStrings/*"
+              ],
+              "notActions": [],
+              "dataActions": [],
+              "notDataActions": []
+          }
+      ]
+  }
+}

SQL/Auditing/AzureReporting2.sql

@@ -0,0 +1,134 @@
+use master
+go
+
+ALTER CREDENTIAL [https://sqlauditlogeffectory.blob.core.windows.net/azurereporting2]
+WITH IDENTITY='SHARED ACCESS SIGNATURE',
+SECRET = 'sp=racwdl&st=2024-04-09T13:43:40Z&se=2035-04-19T21:43:40Z&spr=https&sv=2022-11-02&sr=c&sig=zJqPI62bJP%2F94xtQPyDMFbyStgy0YXuGySqW6VSbMLo%3D'
+GO
+
+
+
+CREATE SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT] TO URL ( PATH ='https://sqlauditlogeffectory.blob.core.windows.net/azurereporting2' , RETENTION_DAYS = 365)
+GO
+
+ 
+-- Create server specification
+CREATE SERVER AUDIT SPECIFICATION [AZUREREPORTING2_SERVER_AUDIT_SPEC]
+FOR SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT]
+   ADD (FAILED_LOGIN_GROUP),
+   ADD (LOGOUT_GROUP),
+   ADD (SUCCESSFUL_LOGIN_GROUP)
+   WITH (STATE=ON);
+GO
+ 
+-- Set state on
+ALTER SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT] WITH (STATE = ON);
+GO
+
+USE [ReportServer]
+GO
+
+CREATE DATABASE AUDIT SPECIFICATION [ReportServer_audit]
+FOR SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [ReportServerTempDB]
+GO
+
+CREATE DATABASE AUDIT SPECIFICATION [ReportServerTempDB_audit]
+FOR SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [SSISDB]
+GO
+
+CREATE DATABASE AUDIT SPECIFICATION [SSISDB_audit]
+FOR SERVER AUDIT [AZUREREPORTING2_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO

SQL/Auditing/sqlserver01prod.sql

@@ -0,0 +1,656 @@
+use master
+go
+
+ALTER CREDENTIAL [https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01prod]
+WITH IDENTITY='SHARED ACCESS SIGNATURE',
+SECRET = 'zzzzzzzzz'
+GO
+
+CREATE SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] TO URL ( PATH ='https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01prod' , RETENTION_DAYS = 365)
+GO
+
+ 
+-- Create server specification
+CREATE SERVER AUDIT SPECIFICATION [SQLSERVER01_SERVER_AUDIT_SPEC]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+   ADD (FAILED_LOGIN_GROUP),
+   ADD (LOGOUT_GROUP),
+   ADD (SUCCESSFUL_LOGIN_GROUP)
+   WITH (STATE=ON);
+GO
+ 
+-- Set state on
+ALTER SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] WITH (STATE = ON);
+GO
+
+USE [ChangeLog]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory CM]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Communication]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Live]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Project]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Questionbase]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+----------------------------
+
+
+
+
+USE [Effectory Response Center]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response MRT import]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response Queue]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [esm_wh]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [ktv_wh]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [MRT Reporting Data]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+
+USE [Personeelsadministratie]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [PMSoftware]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Teleform_V16_5]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform_V16_5_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform_V16_5_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Teleform109]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+

SQL/Auditing/sqlserver01test.sql

@@ -0,0 +1,656 @@
+use master
+go
+
+CREATE CREDENTIAL [https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01test]
+WITH IDENTITY='SHARED ACCESS SIGNATURE',
+SECRET = 'xxxxxx'
+GO
+
+CREATE SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] TO URL ( PATH ='https://sqlauditlogeffectory.blob.core.windows.net/sqlserver01test' , RETENTION_DAYS = 365)
+GO
+
+ 
+-- Create server specification
+CREATE SERVER AUDIT SPECIFICATION [SQLSERVER01_SERVER_AUDIT_SPEC]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+   ADD (FAILED_LOGIN_GROUP),
+   ADD (LOGOUT_GROUP),
+   ADD (SUCCESSFUL_LOGIN_GROUP)
+   WITH (STATE=ON);
+GO
+ 
+-- Set state on
+ALTER SERVER AUDIT [SQLSERVER01_SERVER_AUDIT] WITH (STATE = ON);
+GO
+
+USE [ChangeLog]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ChangeLog_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory CM]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_CM_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Communication]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Communication_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Live]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Live_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Project]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Project_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Questionbase]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+WITH (STATE = OFF)
+
+ALTER  DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+----------------------------
+
+
+
+
+USE [Effectory Response Center]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response MRT import]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Effectory Response Queue]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [esm_wh]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [esm_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [ktv_wh_REMOVEAFTER202310]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [ktv_wh_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [mgtinfo_REMOVEAFTER202402]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [mgtinfo_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [mgtinfo_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [MRT Reporting Data]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+
+USE [Personeelsadministratie]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [PMSoftware]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [PMSoftware_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP)
+WITH (STATE = ON)
+GO
+
+USE [Teleform109]
+GO
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+WITH (STATE = OFF)
+
+ALTER DATABASE AUDIT SPECIFICATION [Teleform109_audit]
+FOR SERVER AUDIT [SQLSERVER01_SERVER_AUDIT]
+ADD (DATABASE_OBJECT_ACCESS_GROUP),
+ADD (SCHEMA_OBJECT_ACCESS_GROUP),
+ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP),
+ADD (BATCH_COMPLETED_GROUP),
+ADD (BACKUP_RESTORE_GROUP),
+ADD (BATCH_STARTED_GROUP),
+ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP),
+ADD (USER_CHANGE_PASSWORD_GROUP),
+ADD (USER_DEFINED_AUDIT_GROUP),
+ADD (SCHEMA_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_OPERATION_GROUP),
+ADD (LEDGER_OPERATION_GROUP),
+ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP),
+ADD (SENSITIVE_BATCH_COMPLETED_GROUP),
+ADD (DATABASE_OWNERSHIP_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP),
+ADD (DATABASE_CHANGE_GROUP),
+ADD (DATABASE_OBJECT_CHANGE_GROUP),
+ADD (DATABASE_PRINCIPAL_CHANGE_GROUP),
+ADD (AUDIT_CHANGE_GROUP),
+ADD (FAILED_DATABASE_AUTHENTICATION_GROUP),
+ADD (DATABASE_LOGOUT_GROUP),
+ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP),
+ADD (DBCC_GROUP),
+ADD (DATABASE_PERMISSION_CHANGE_GROUP)
+WITH (STATE = ON)
+GO
+
+