SQL Server Audit Log Event ID 24053
24053: Audit session changed (action_id AUSC)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
An audit session was changed
Free Security Log Resources by Randy
Field |
Description |
Occurred |
When event was reported by SQL Server |
Session ID |
ID of the session on which the event occurred |
User |
|
Server |
|
Statement |
Transact-SQL statement |
Additional information |
Any additional information about the event, stored as XML. |
Supercharger Free Edition
Supercharger's built-in Xpath filters leave the noise behind.
Free.
This Event Is Produced By
Which Integrates with Your SIEM
Audit session changed
An audit session was changed
Action Group: AUDIT_CHANGE_GROUP
Occurred: 8/22/2013 6:08:10.0000000 PM
Session ID: 67
User: LB\Administrator
Server: DEV3
Statement: n/a
Additional information: <action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"><session><![CDATA[TestServerAudit$A]]></session><action>event disabled</action><object><![CDATA[audit_event]]></object></action_info>
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24053
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection