SQL Server Audit Log Event ID 24018
24018: Remove member from server role succeeded (action_id DPRL class_type SG)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A principal was successfully removed from a server role
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Member | Member added or removed |
| Role | |
| | ID | ID of the role affected by this event |
| | Name | Name of the role affected by this event |
| Statement | Transact-SQL statement |
Supercharger Enterprise
This Event Is Produced By
Which Integrates with Your SIEM
Remove member from server role succeeded
A principal was successfully removed from a server role
Action Group: SERVER_ROLE_MEMBER_CHANGE_GROUP
Occurred: 8/22/2013 6:07:50.0000000 PM
Session ID: 67
User: LB\Administrator
Server: DEV3
Member: TestLogin1
Role
ID: 4
Name: securityadmin
Statement: alter server role [securityadmin] drop member [TestLogin1]
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24018
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection