CREATE SERVER AUDIT [sql01audit_loganalytics] TO EXTERNAL_MONITOR; GO -- Create server specification CREATE SERVER AUDIT SPECIFICATION [sql01audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (FAILED_LOGIN_GROUP), ADD (LOGOUT_GROUP), ADD (SUCCESSFUL_LOGIN_GROUP) WITH (STATE=ON); GO -- Set state on ALTER SERVER AUDIT [sql01audit_loganalytics] WITH (STATE = ON); GO USE [ChangeLog] GO CREATE DATABASE AUDIT SPECIFICATION [ChangeLog_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [Effectory CM] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_CM_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [Effectory Live] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Live_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [Effectory Project] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Project_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [Effectory Questionbase] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Questionbase_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO ---------------------------- USE [Effectory Response Center] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_Center_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO USE [Effectory Response MRT import] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_MRT_import_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [Effectory Response Queue] GO CREATE DATABASE AUDIT SPECIFICATION [Effectory_Response_Queue_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [esm_wh] GO CREATE DATABASE AUDIT SPECIFICATION [esm_wh_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO USE [ktv_wh] GO CREATE DATABASE AUDIT SPECIFICATION [ktv_wh_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [MRT Reporting Data] GO CREATE DATABASE AUDIT SPECIFICATION [MRT_Reporting_Data_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO USE [Personeelsadministratie] GO CREATE DATABASE AUDIT SPECIFICATION [Personeelsadministratie_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO USE [PMSoftware] GO CREATE DATABASE AUDIT SPECIFICATION [PMSoftware_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO USE [Teleform_V16_5] GO CREATE DATABASE AUDIT SPECIFICATION [Teleform_V16_5_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP) WITH (STATE = ON) GO USE [Teleform109] GO CREATE DATABASE AUDIT SPECIFICATION [Teleform109_audit_loganalytics] FOR SERVER AUDIT [sql01audit_loganalytics] ADD (DATABASE_OBJECT_ACCESS_GROUP), ADD (SCHEMA_OBJECT_ACCESS_GROUP), ADD (DATABASE_ROLE_MEMBER_CHANGE_GROUP), ADD (BATCH_COMPLETED_GROUP), ADD (BACKUP_RESTORE_GROUP), ADD (BATCH_STARTED_GROUP), ADD (DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (SCHEMA_OBJECT_OWNERSHIP_CHANGE_GROUP), ADD (USER_CHANGE_PASSWORD_GROUP), ADD (USER_DEFINED_AUDIT_GROUP), ADD (SCHEMA_OBJECT_CHANGE_GROUP), ADD (DATABASE_OPERATION_GROUP), ADD (LEDGER_OPERATION_GROUP), ADD (APPLICATION_ROLE_CHANGE_PASSWORD_GROUP), ADD (SENSITIVE_BATCH_COMPLETED_GROUP), ADD (DATABASE_OWNERSHIP_CHANGE_GROUP), ADD (DATABASE_OBJECT_PERMISSION_CHANGE_GROUP), ADD (SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_IMPERSONATION_GROUP), ADD (DATABASE_CHANGE_GROUP), ADD (DATABASE_OBJECT_CHANGE_GROUP), ADD (DATABASE_PRINCIPAL_CHANGE_GROUP), ADD (AUDIT_CHANGE_GROUP), ADD (FAILED_DATABASE_AUTHENTICATION_GROUP), ADD (DATABASE_LOGOUT_GROUP), ADD (SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP), ADD (DBCC_GROUP), ADD (DATABASE_PERMISSION_CHANGE_GROUP) WITH (STATE = ON) GO