Auditing SQL Server?

Are there any suggestions for auditing transactions including 'selects'
without the use of 'triggers'? Triggers are something our client can NOT us
e.
TIA
REM>> Are there any suggestions for auditing transactions including 'selects'[vbcol=seagreen]
Using profiler to trace the t-SQL statements might be feasible for auditing
SELECT statements, but in transaction heavy systems, this can be a potential
performance issue. Third party products like Entegra from Lumigent also has
a trace-based auditing provision for SELECT statements issued against a
database.
Anith|||YOu could
-pass everything though a stored produre to keep track of it.
-Query the logfile with a logfile application
-Run the profiler and let him trace the statements to a table. 8depending
onyour application this will cost mcuh disk space)
HTH, Jens Suessmeyer.
http://www.sqlserver2005.de
--
"dt09359" <dt09359@.discussions.microsoft.com> schrieb im Newsbeitrag
news:79C5DC37-01A0-4502-8F26-3156B811F03C@.microsoft.com...
> Are there any suggestions for auditing transactions including 'selects'
> without the use of 'triggers'? Triggers are something our client can NOT
> use.
> TIA
> REM

Auditing SQL Server?

Are there any suggestions for auditing transactions including 'selects'
without the use of 'triggers'? Triggers are something our client can NOT use.
TIA
REM
>> Are there any suggestions for auditing transactions including 'selects'[vbcol=seagreen]
Using profiler to trace the t-SQL statements might be feasible for auditing
SELECT statements, but in transaction heavy systems, this can be a potential
performance issue. Third party products like Entegra from Lumigent also has
a trace-based auditing provision for SELECT statements issued against a
database.
Anith
|||YOu could
-pass everything though a stored produre to keep track of it.
-Query the logfile with a logfile application
-Run the profiler and let him trace the statements to a table. 8depending
onyour application this will cost mcuh disk space)
HTH, Jens Suessmeyer.
http://www.sqlserver2005.de
"dt09359" <dt09359@.discussions.microsoft.com> schrieb im Newsbeitrag
news:79C5DC37-01A0-4502-8F26-3156B811F03C@.microsoft.com...
> Are there any suggestions for auditing transactions including 'selects'
> without the use of 'triggers'? Triggers are something our client can NOT
> use.
> TIA
> REM

Auditing SQL Server?

Are there any suggestions for auditing transactions including 'selects'
without the use of 'triggers'? Triggers are something our client can NOT use.
TIA
REM>> Are there any suggestions for auditing transactions including 'selects'
>> without the use of 'triggers'?
Using profiler to trace the t-SQL statements might be feasible for auditing
SELECT statements, but in transaction heavy systems, this can be a potential
performance issue. Third party products like Entegra from Lumigent also has
a trace-based auditing provision for SELECT statements issued against a
database.
--
Anith|||YOu could
-pass everything though a stored produre to keep track of it.
-Query the logfile with a logfile application
-Run the profiler and let him trace the statements to a table. 8depending
onyour application this will cost mcuh disk space)
HTH, Jens Suessmeyer.
--
http://www.sqlserver2005.de
--
"dt09359" <dt09359@.discussions.microsoft.com> schrieb im Newsbeitrag
news:79C5DC37-01A0-4502-8F26-3156B811F03C@.microsoft.com...
> Are there any suggestions for auditing transactions including 'selects'
> without the use of 'triggers'? Triggers are something our client can NOT
> use.
> TIA
> REM

Auditing IN SQL 2k

Hello
I need to record the activities/changes in certain tables in my application
including who effected the change,time, the field that was changed, the new
and old value of the field. How do i go about doing this? I need to do this
without actually making code changes in my application.
Would be quite helpful if someone could help me with clear steps as to how
this is to be done as I'm a newbie to this field.
Thanks in advance
Regds
RachelTake a look at
http://www.microsoft.com/technet/security/prodtech/sqlserver/sql2kaud.mspx
You could also do a Google search on "SQL Server 2000 Auditing" which will
turn up alternatives. For example:
http://www.akadia.com/services/sqlsrv_table_auditing.html
Hal Berenson, President
PredictableIT, LLC
"rachel" <rachel@.discussions.microsoft.com> wrote in message
news:7F547B93-A7FF-4200-93DB-8980A1E8A53E@.microsoft.com...
> Hello
> I need to record the activities/changes in certain tables in my
> application
> including who effected the change,time, the field that was changed, the
> new
> and old value of the field. How do i go about doing this? I need to do
> this
> without actually making code changes in my application.
> Would be quite helpful if someone could help me with clear steps as to how
> this is to be done as I'm a newbie to this field.
> Thanks in advance
> Regds
> Rachel
>
>

Audit Records

One of the requirements for an application I helpping to develop is
providing audit records of add, updates and deletes including the user who
added, updated and deleted. This application is being sold commerically to
users who have different requirements including not needing audit records.
I was thinking that this could best be done using triggers, having first
requiring the the userid be updated each time. The trigger could simply
copy the row to an audit table for each insert and update. If the user does
not require auditing, don't install the triggers. If the user wishes audit
records only when certain columns have chanaged, then use the if
updated(column_name) logic.
It's the deletes I am having a problem with. I can certainly copy deleted
rows to the audit table, but how would I be able to include the userid of
the user initiating the delete?Inside your delete trigger, you can use USER_NAME() when you go to insert
the deleted row into your audit table.
Tom
----
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com
.
"Robert E. Flaherty" <bobflaherty@.charter.net> wrote in message
news:eun5$ZYMFHA.2384@.tk2msftngp13.phx.gbl...
One of the requirements for an application I helpping to develop is
providing audit records of add, updates and deletes including the user who
added, updated and deleted. This application is being sold commerically to
users who have different requirements including not needing audit records.
I was thinking that this could best be done using triggers, having first
requiring the the userid be updated each time. The trigger could simply
copy the row to an audit table for each insert and update. If the user does
not require auditing, don't install the triggers. If the user wishes audit
records only when certain columns have chanaged, then use the if
updated(column_name) logic.
It's the deletes I am having a problem with. I can certainly copy deleted
rows to the audit table, but how would I be able to include the userid of
the user initiating the delete?|||Thanks for the reply. All of the actions are going through an ISAPI DLL
with using standard user id and password. The user's id (which is an
application id and not a MS SQL Server login/userid) is passed on to the
database server as just another data element.
"Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message
news:uKURYdYMFHA.2680@.TK2MSFTNGP09.phx.gbl...
> Inside your delete trigger, you can use USER_NAME() when you go to insert
> the deleted row into your audit table.
> --
> Tom
> ----
> Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
> SQL Server MVP
> Columnist, SQL Server Professional
> Toronto, ON Canada
> www.pinnaclepublishing.com
> .
> "Robert E. Flaherty" <bobflaherty@.charter.net> wrote in message
> news:eun5$ZYMFHA.2384@.tk2msftngp13.phx.gbl...
> One of the requirements for an application I helpping to develop is
> providing audit records of add, updates and deletes including the user who
> added, updated and deleted. This application is being sold commerically
> to
> users who have different requirements including not needing audit records.
> I was thinking that this could best be done using triggers, having first
> requiring the the userid be updated each time. The trigger could simply
> copy the row to an audit table for each insert and update. If the user
> does
> not require auditing, don't install the triggers. If the user wishes
> audit
> records only when certain columns have chanaged, then use the if
> updated(column_name) logic.
> It's the deletes I am having a problem with. I can certainly copy deleted
> rows to the audit table, but how would I be able to include the userid of
> the user initiating the delete?
>|||In that case, you'll have to manage that through a stored proc whereby you
feed the proc the user info.
Tom
----
Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
SQL Server MVP
Columnist, SQL Server Professional
Toronto, ON Canada
www.pinnaclepublishing.com
.
"Robert E. Flaherty" <bobflaherty@.charter.net> wrote in message
news:uuTXcoYMFHA.3336@.TK2MSFTNGP09.phx.gbl...
Thanks for the reply. All of the actions are going through an ISAPI DLL
with using standard user id and password. The user's id (which is an
application id and not a MS SQL Server login/userid) is passed on to the
database server as just another data element.
"Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message
news:uKURYdYMFHA.2680@.TK2MSFTNGP09.phx.gbl...
> Inside your delete trigger, you can use USER_NAME() when you go to insert
> the deleted row into your audit table.
> --
> Tom
> ----
> Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
> SQL Server MVP
> Columnist, SQL Server Professional
> Toronto, ON Canada
> www.pinnaclepublishing.com
> .
> "Robert E. Flaherty" <bobflaherty@.charter.net> wrote in message
> news:eun5$ZYMFHA.2384@.tk2msftngp13.phx.gbl...
> One of the requirements for an application I helpping to develop is
> providing audit records of add, updates and deletes including the user who
> added, updated and deleted. This application is being sold commerically
> to
> users who have different requirements including not needing audit records.
> I was thinking that this could best be done using triggers, having first
> requiring the the userid be updated each time. The trigger could simply
> copy the row to an audit table for each insert and update. If the user
> does
> not require auditing, don't install the triggers. If the user wishes
> audit
> records only when certain columns have chanaged, then use the if
> updated(column_name) logic.
> It's the deletes I am having a problem with. I can certainly copy deleted
> rows to the audit table, but how would I be able to include the userid of
> the user initiating the delete?
>|||That is along the lines that I was thinking. The stored procedure designed
to delete a row would first update the UpdatedBy column with the user id of
the user requesting the deletion. The proc would then delete the row. A
trigger could then copy the row to an audit table.
I was wanting to know if there was a better way and/or more standard way of
doing this.
"Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message
news:eGGQuuYMFHA.2420@.TK2MSFTNGP10.phx.gbl...
> In that case, you'll have to manage that through a stored proc whereby you
> feed the proc the user info.
> --
> Tom
> ----
> Thomas A. Moreau, BSc, PhD, MCSE, MCDBA
> SQL Server MVP
> Columnist, SQL Server Professional
> Toronto, ON Canada
> www.pinnaclepublishing.com
> .
> "Robert E. Flaherty" <bobflaherty@.charter.net> wrote in message
> news:uuTXcoYMFHA.3336@.TK2MSFTNGP09.phx.gbl...
> Thanks for the reply. All of the actions are going through an ISAPI DLL
> with using standard user id and password. The user's id (which is an
> application id and not a MS SQL Server login/userid) is passed on to the
> database server as just another data element.
> "Tom Moreau" <tom@.dont.spam.me.cips.ca> wrote in message
> news:uKURYdYMFHA.2680@.TK2MSFTNGP09.phx.gbl...
>