SQL Server Audit Log Event ID 24043
24043: Issued a change server audit command (action_id AL class_type A)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A change server audit command was issued
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Authorization result | If the command passed authorization checks |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Audit Name | Audit object (actually called simply an Audit). Don't confuse Audits with Audit Specifications like a Server Audit Specificaiton or a Database Audit Specification. See Configuring SQL Server Audit Logging with Audit Objects. |
| Statement | Transact-SQL statement |
Supercharger Free Edition
Supercharger's built-in Xpath filters leave the noise behind.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Issued a change server audit command
A change server audit command was issued
Action Group: AUDIT_CHANGE_GROUP
Occurred: 8/22/2013 6:08:10.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Audit Name: TestServerAudit
Statement: ALTER SERVER AUDIT TestServerAudit WITH (STATE = OFF)
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24043
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection