SQL Server Audit Log Event ID 24060
24060: Issued a delete server object command (action_id DR; class_type AG, EP, SD, SE, T)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to delete a server object was issued
This event corresponds to action_id DR - DROP for the following class_types:
| class_type |
Class Description |
| AG |
AVAILABILITY GROUP |
| EP |
ENDPOINT |
| SD |
EVENT NOTIFICATION SERVER |
| SE |
EVENT SESSION |
| T |
TRIGGER SERVER |
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server |
| Authorization result |
If the command passed authorization checks |
| Session ID |
ID of the session on which the event occurred |
| User |
|
| Server |
|
| Target object |
|
| |
ID |
Target object ID |
| |
Name |
Target object name |
| |
Type |
Target object type |
| Statement |
Transact-SQL statement |
Supercharger Enterprise
This Event Is Produced By
Which Integrates with Your SIEM
Issued a delete server object command
A command to delete a server object was issued
Action Group: SERVER_OBJECT_CHANGE_GROUP
Occurred: 8/22/2013 10:12:01.0000000 AM
Authorization result: Access allowed
Session ID: 85
User: LB\dev4sqlc
Server: DEV3
Target Object
ID: n/a
Name: SharePoint_Diagnostics_4ebe1a53a0a3484884f4f65a925505aa_1
Type: Event session
Statement: DROP EVENT SESSION SharePoint_Diagnostics_4ebe1a53a0a3484884f4f65a925505aa_1 ON SERVER
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24060
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection