SQL Server Audit Log Event ID 24063
24063: Issued a delete server setting command (action_id DR class_type SR)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to delete a setting on the server was issued
Free Security Log Resources by Randy
| Field | Description |
|---|
| Occurred | When event was reported by SQL Server |
| Authorization result | If the command passed authorization checks |
| Session ID | ID of the session on which the event occurred |
| User | |
| Server | |
| Statement | Transact-SQL statement |
| Additional information | Any additional information about the event, stored as XML. |
Setup PowerShell Audit Log Forwarding in 4 Minutes
This Event Is Produced By
Which Integrates with Your SIEM
Issued a delete server setting command
A command to delete a setting on the server was issued
Action Group: SERVER_OBJECT_CHANGE_GROUP
Occurred: 8/22/2013 6:07:49.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Statement: EXEC sp_dropserver N'DEV2'
Additional information: <action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"><server_name><![CDATA[DEV2]]></server_name></action_info>
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24063
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection