SQL Server Audit Log Event ID 24003
24003: Login failed (action_id LGIF)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A principal's attempt to log on to SQL server failed
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server |
| Server |
|
| Target object |
|
| |
Name |
Target object name |
| |
Type |
Target object type |
| Statement |
Transact-SQL statement |
| Additional information |
Any additional information about the event, stored as XML. |
Setup PowerShell Audit Log Forwarding in 4 Minutes
This Event Is Produced By
Which Integrates with Your SIEM
Login failed
A principal's attempt to log on to SQL server failed
Action Group: FAILED_LOGIN_GROUP
Occurred: 8/22/2013 5:59:13.0000000 PM
Server: DEV3
Target Object
Name: LB\dev4sp
Type: Login
Statement: Login failed for user 'LB\dev4sp'. Reason: Failed to open the explicitly specified database 'Search_Service_Application_CrawlStoreDB_1d60e72dfd024b3bb6830f2e4259908f'. [CLIENT: 10.42.1.184]
Additional information: <action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"><pooled_connection>0</pooled_connection><error>0x00004818</error><state>38</state><address>10.42.1.184</address></action_info>
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24003
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection