SQL Server Audit Log Event ID 24108
24108: Issued a create database object command (action_id CR)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to create a database object was issued
This event corresponds to action_id CR - CREATE for the following class_types:
| class_type |
Class Description |
| BN |
REMOTE SERVICE BINDING |
| CT |
CONTRACT |
| DE |
DATABASE EVENT SESSION |
| DN |
EVENT NOTIFICATION DATABASE |
| DT |
TRIGGER DATABASE |
| FC |
FULLTEXT CATALOG |
| FL |
FULLTEXT STOPLIST |
| FP |
SEARCH PROPERTY LIST |
| MT |
MESSAGE TYPE |
| ON |
EVENT NOTIFICATION OBJECT |
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server. |
| Authorization result |
If the command passed authorization checks. |
| Session ID |
ID of the session on which the event occurred. |
| User |
User |
| Server |
Server |
| Database |
Database affected by the event. |
| Target object |
|
| |
ID |
Target object ID |
| |
Name |
Target object name |
| |
Type |
Target object type |
| Statement |
Transact-SQL statement |
Supercharger Enterprise
This Event Is Produced By
Which Integrates with Your SIEM
Issued a create database object command
A command to create a database object was issued
Action Group: DATABASE_OBJECT_CHANGE_GROUP
Occurred: 8/22/2013 6:07:51.0000000 PM
Authorization result: Access allowed
Session ID: 67
User: LB\Administrator
Server: DEV3
Database: TestDatabase
Target Object
ID: 293576084
Name: EmployeeList
Type: Stored procedure
Statement: CREATE PROCEDURE EmployeeList AS; SET NOCOUNT ON;; SELECT * FROM Employee
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24108
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection