Microsoft SQL Server SQL Audit and Event Log Events (2024)

DATABASE_ROLE_MEMBER_CHANGE_GROUP

Database Role Member Change Group

ALTER

Any from List 1

BACKUP LOG

Backup Log

BACKUP

Any from List 1

ALTER RESOURCES

Alter Resources

ALTER

Any from List 1

DELETE

Delete

DELETE

Any from List 1

BROKER LOGIN

Broker Login

LOGIN

Any from List 1

LOGOUT GROUP

Logout Group

LOGOUT

Any from List 1

MUST CHANGE PASSWORD

Must Change Password

UPDATE

Any from List 1

DROP MEMBER

Drop Member

DROP

Any from List 1

DENY

Deny

DENY

Any from List 1

SEND

Send

SEND

Any from List 1

SELECT

Select

SELECT

Any from List 1

SERVER_CONTINUE

Server Continue

RESUME

Any from List 1

SERVER OPERATION GROUP

Server Operation Group

EXECUTE

Any from List 1

INSERT

Insert

INSERT

Any from List 1

EXECUTE

Execute

EXECUTE

Any from List 1

SHOW PLAN

Show Plan

EXECUTE

Any from List 1

SUCCESSFUL_LOGIN_GROUP

Successful Login Group

LOGIN

Any from List 1

SERVER_ROLE_MEMBER_CHANGE_GROUP

Server Role Member Change Group

ALTER

Any from List 1

ALTER TRACE

Alter Trace

ALTER

Any from List 1

CREDENTIAL MAP TO LOGIN

Credential Map to Login

SET

Any from List 1

FULL TEXT

Full Text

EXECUTE

Any from List 1

TRACE AUDIT C2ON

Trace Audit C2On

AUDIT

Any from List 1

BULK ADMIN

Bulk Admin

INSERT

Any from List 1

TRACE AUDIT C2OFF

Trace Audit C2Off

NOAUDIT

Any from List 1

VIEW SERVER STATE

View Server State

EXECUTE

Any from List 1

SCHEMA_OBJECT_ACCESS_GROUP

Schema Object Access Group

ACCESS

Any from List 1

ALTER CONNECTION

Alter Connection

ALTER

Any from List 1

ALTER SETTINGS

Alter Settings

ALTER

Any from List 1

ALTER SERVER STATE

Alter Server State

ALTER

Any from List 1

EXTERNAL ACCESS ASSEMBLY

External Access Assembly

ACCESS

Any from List 1

OPEN

Open

OPEN

Any from List 1

AUDIT SHUTDOWN ON FAILURE

Audit Shutdown On Failure

NOAUDIT

Any from List 1

AUDIT SESSION CHANGED

Audit Session Changed

AUDIT

Any from List 1

BACKUP_RESTORE_GROUP

Backup Restore Group

RESTORE

Any from List 1

SERVER_OBJECT_OWNERSHIP_CHANGE_GROUP

Server Object Ownership Change Group

ALTER

Any from List 1

AUTHENTICATE

Authenticate

AUTHENTICATE

Any from List 1

DATABASE_OWNERSHIP_CHANGE_GROUP

Database Ownership Change Group

ALTER

Any from List 1

REFERENCES

References

ACCESS

Any from List 1

SERVER_STARTED

Server Started

STARTUP

Any from List 1

DATABASE_OBJECT_OWNERSHIP_CHANGE_GROUP

Database Object Ownership Change Group

ALTER

Any from List 1

SCHEMA_OBJECT_PERMISSION_CHANGE_GROUP

Schema Object Permission Change Group

ALTER

Any from List 1

IMPERSONATE

Impersonate

PROXY

Any from List 1

CREATE

Create

CREATE

Any from List 1

SERVER_STATE_CHANGE_GROUP

Server State Change Group

ALTER

Any from List 1

TAKE OWNERSHIP

Take Ownership

ALTER

Any from List 1

TRANSFER

Transfer

MOVE

Any from List 1

CHANGE USERS LOGIN AUTO

Change Users Login Auto

ALTER

Any from List 1

ADD MEMBER

Add Member

UPDATE

Any from List 1

VIEW CHANGETRACKING

View ChangeTracking

EXECUTE

Any from List 1

LOGIN FAILED

Login Failed

LOGIN

Any from List 1

DATABASE_PRINCIPAL_CHANGE_GROUP

Database Principal Change Group

ALTER

Any from List 1

DATABASE_OBJECT_CHANGE_GROUP

Database Object Change Group

UPDATE

Any from List 1

DATABASE_MIRRORING_LOGIN_GROUP

Database Mirroring Login Group

LOGIN

Any from List 1

ALTER

Alter

LOGIN

Any from List 1

PASSWORD EXPIRATION

Password Expiration

EXPIRE

Any from List 1

UPDATE

Update

UPDATE

Any from List 1

NAME CHANGE

Name Change

ALTER

Any from List 1

LOGOUT

Logout

LOGOUT

Any from List 1

LOGIN SUCCEEDED

Login Succeeded

LOGIN

Any from List 1

DATABASE_CHANGE_GROUP

Database Change Group

UPDATE

Any from List 1

LOGIN_CHANGE_PASSWORD_GROUP

Login Change Password Group

UPDATE

Any from List 1

RESET OWN PASSWORD

Reset Own Password

RESET

Any from List 1

CHANGE USERS LOGIN

Change Users Login

ALTER

Any from List 1

TRACE_CHANGE_GROUP

Trace Change Group

ALTER

Any from List 1

FAILED_LOGIN_GROUP

Failed Login Group

LOGIN

Any from List 1

TRACE AUDIT STOP

Trace Audit Stop

NOAUDIT

Any from List 1

REVOKE

Revoke

REVOKE

Any from List 1

CHANGE OWN PASSWORD

Change Own Password

UPDATE

Any from List 1

CHANGE LOGIN CREDENTIAL

Change Login Credential

ALTER

Any from List 1

RECEIVE

Receive

GET

Any from List 1

AUDIT_CHANGE_GROUP

Audit Change Group

AUDIT

Any from List 1

CHANGE DEFAULT LANGUAGE

Change Default Language

ALTER

Any from List 1

CHANGE PASSWORD

Change Password

UPDATE

Any from List 1

RESTORE

Restore

RESTORE

Any from List 1

DATABASE MIRRORING LOGIN

Database Mirroring Login

LOGIN

Any from List 1

REVOKE WITH CASCADE

Revoke with Cascade

REVOKE

Any from List 1

DROP

Drop

DROP

Any from List 1

SERVER_OBJECT_CHANGE_GROUP

Server Object Change Group

ALTER

Any from List 1

VIEW_DATABASE_STATE

View Database State

EXECUTE

Any from List 1

SERVER_PRINCIPAL_CHANGE_GROUP

Server Principal Change Group

ALTER

Any from List 1

UNLOCK ACCOUNT

Unlock Account

UNLOCK

Any from List 1

FULLTEXT_GROUP

Fulltext Group

EXECUTE

Any from List 1

ENABLE

Enable

ENABLE

Any from List 1

PASSWORD POLICY

Password Policy

UPDATE

Any from List 1

REVOKE WITH GRANT

Revoke With Grant

REVOKE

Any from List 1

DATABASE_PRINCIPAL_IMPERSONATION_GROUP

Database Principal Impersonation Group

PROXY

Any from List 1

RESET PASSWORD

Reset Password

RESET

Any from List 1

SUBSCRIBE QUERY NOTIFICATION

Subscribe Query Notification

SUBSCRIBE

Any from List 1

SERVER_PRINCIPAL_IMPERSONATION_GROUP

Server Principal Impersonation Group

PROXY

Any from List 1

APPLICATION_ROLE_CHANGE_PASSWORD_GROUP

Application Role Change Password Group

UPDATE

Any from List 1

TRACE AUDIT START

Trace Audit Start

AUDIT

Any from List 1

DATABASE OBJECT PERMISSION CHANGE GROUP

Database Object Permission Change Group

ALTER

Any from List 1

SERVER PAUSED

Server Paused

PAUSE

Any from List 1

DATABASE_OPERATION_GROUP

Database Operation Group

DML

Any from List 1

ACCESS

Access

ACCESS

Any from List 1

DATABASE_PERMISSION_CHANGE_GROUP

Database Permission Change Group

ALTER

Any from List 1

UNSAFE ASSEMBLY

Unsafe Assembly

ACCESS

Any from List 1

DENY WITH CASCADE

Deny with Cascade

DENY

Any from List 1

DBCC_GROUP

DBCC Group

EXECUTE

Any from List 1

BROKER_LOGIN_GROUP

Broker Login Group

LOGIN

Any from List 1

CHECKPOINT

Checkpoint

SAVEPOINT

Any from List 1

SERVER SHUTDOWN

Server Shutdown

SHUTDOWN

Any from List 1

NO CREDENTIAL MAP TO LOGIN

No Credential Map to Login

SET

Any from List 1

SCHEMA_OBJECT_CHANGE_GROUP

Schema Object Change Group

ALTER

Any from List 1

CONNECT

Connect

CONNECT

Any from List 1

GRANT WITH GRANT

Grant with Grant

GRANT

Any from List 1

CHANGE DEFAULT DATABASE

Change Default Database

ALTER

Any from List 1

DISABLE

Disable

DISABLE

Any from List 1

SCHEMA_OBJECT_OWNERSHIP CHANGE_GROUP

Schema Object Ownership Change Group

ALTER

Any from List 1

GRANT

Grant

GRANT

Any from List 1

SERVER_PERMISSION_CHANGE_GROUP

Server Permission Change Group

ALTER

Any from List 1

SERVER_OBJECT_PERMISSION CHANGE_GROUP

Server Object Permission Change Group

ALTER

Any from List 1

DATABASE_OBJECT_ACCESS_GROUP

Database Object Access Group

ACCESS

Any from List 1

DBCC

DBCC

EXECUTE

Any from List 1

BACKUP

Backup

BACKUP

Any from List 1