|
Audit Event Value
|
Audit Option
|
Command or Audited Login
|
Column extrainfo in
sysaudits
|
|
1
|
adhoc
|
User Defined Audit Records.
|
The value stored in
extrainfo is defined via the parameter text of the
stored procedure
sp_addauditrecord.
|
|
2
|
alter
|
alter database
|
-
Roles – Active Roles
-
Subcommand–
ALTER SIZE
-
Original/Previous Value –
NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if
set proxy
is set.
|
|
3
|
alter
|
alter table
|
-
Roles - Active Roles
-
Subcommand –
ADD COLUMN,
REPLACE COLUMN,
ADD CONSTRAINT
or
DROP CONSTRAINT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, ifset proxy is set.
|
|
4
|
bcp
|
bcp in
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, ifset proxy is set.
|
|
6
|
bind
|
sp_bindefault
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Default name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
7
|
bind
|
sp_bindmsg
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information - Message ID
-
Proxy Information – The original login_name, if set proxy is set.
|
|
8
|
bind
|
sp_bindrule
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information - Role Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
9
|
create
|
create database
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
10
|
create
|
create table
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
11
|
create
|
create procedure
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
12
|
create
|
create trigger
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
13
|
create
|
create rule
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
14
|
create
|
create default
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Additional Information – NULL
-
Current Value – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
15
|
create
|
sp_addmessage
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Message Number
-
Proxy Information – The original login_name, if set proxy is set.
|
|
16
|
create
|
create view
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
17
|
dbaccess
|
Every login of a
user
into a
database.
|
-
Roles – Active Roles
-
Subcommand – USE CMD oder OUTSIDE REFERENCE
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
18
|
delete
|
delete from table
|
-
Roles – Active Roles
-
Subcommand – DELETE
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
19
|
delete
|
delete from view
|
-
Roles – Active Roles
-
Subcommand – DELETE
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
20
|
disk
|
disk init
|
-
Roles – Active Roles
-
Subcommand – disk init
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
21
|
disk
|
disk refit
|
-
Roles – Active Roles
-
Subcommand – disk refit
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
22
|
disk
|
disk reinit
|
-
Roles – Active Roles
-
Subcommand – disk reinit
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
23
|
disk
|
disk mirror
|
-
Roles – Active Roles
-
Subcommand – disk mirror
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
24
|
disk
|
disk unmirror
|
-
Roles – Active Roles
-
Subcommand – disk unmirror
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
25
|
disk
|
disk remirror
|
-
Roles – Active Roles
-
Subcommand – disk remirror
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Disk Name
-
Proxy Information – The original login_name, if set proxy is set.
|
|
26
|
drop
|
drop database
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
27
|
drop
|
drop table
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
28
|
drop
|
drop procedure
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
29
|
drop
|
drop trigger
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
30
|
drop
|
drop rule
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
31
|
drop
|
drop default
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
32
|
drop
|
sp_dropmessage
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Message Number
-
Proxy Information – The original login_name, if set proxy is set.
|
|
33
|
drop
|
drop view
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
|
|
34
|
dump
|
dump database
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
35
|
dump
|
dump transaction
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
36
|
errors
|
Fatal error
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – ErrorNumber.Severity.State
-
Proxy Information – The original login_name, if set proxy is set.
|
|
37
|
errors
|
Non-fatal error
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – ErrorNumber.Severity.State
-
Proxy Information – The original login_name, if set proxy is set.
|
|
38
|
exec,
exec_procedure
|
When executing a
stored procedure
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – All Parameters Specified
-
Proxy Information – The original login_name, if set proxy is set.
|
|
39
|
exec,
exec_trigger
|
When Executing a
Trigger
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
40
|
grant
|
grant
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
41
|
insert
|
insert into table
|
-
Roles – Active Roles
-
Subcommand
- When insert – INSERT
-
select into
– INSERT INTO (followed by the fully qualified object name).
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
42
|
insert
|
insert into view
|
-
Roles – Active Roles
-
Subcommand – INSERT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
43
|
load
|
load database
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
44
|
load
|
load transaction
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
45
|
login
|
Every Login into
ASE.
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Host Name and Machine Name from where the Login originated.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
46
|
logout
|
Every logout from
Adaptive Server
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Host Name and Machine Name from where the Login originated.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
47
|
revoke
|
revoke
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
48
|
rpc
|
Remote Procedure Call
to another server.
|
-
Roles – Active Roles
-
Subcommand – Name of the Client Executable
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Server Name, Host Name where the
RPC
originated.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
49
|
rpc
|
RPC (Remote procedure call)to another server.
|
-
Roles – Active Roles
-
Subcommand – Procedure name
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
50
|
security
|
Server start
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information
- -dMaster device name
- -iPath to the interfaces file
- -SServer Name
- -eName of the Error Log
-
Proxy Information – The original login_name, if set proxy is set.
|
|
51
|
security
|
Server shutdown
|
-
Roles – Active Roles
-
Subcommand – shutdown
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
55
|
security
|
Role toggling
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – on oder off
-
Current Value – on oder off
-
Additional Information – Name of the Role set.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
61
|
table_access
|
Tabllenzugriff
|
-
Roles – Active Roles
-
Subcommand –
SELECT,
SELECT INTO,
INSERT,
UPDATE,
DELETE,
REFERENCE,
READTEXT
oder
WRITETEXT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
62
|
select
|
select from a
table
|
-
Roles – Active Roles
-
Subcommand – SELECT INTO, SELECT oder READTEXT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
63
|
select
|
select from a
view
|
-
Roles – Active Roles
-
Subcommand – SELECT, SELECT INTO oder READTEXT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
64
|
truncate
|
truncate table
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
67
|
unbind
|
sp_unbindefault
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
68
|
unbind
|
sp_unbindrule
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
69
|
unbind
|
sp_unbindmsg
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
70
|
update
|
update to a table
|
-
Roles – Active Roles
-
Subcommand – UPDATE oder WRITETEXT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
71
|
update
|
update to a view
|
-
Roles – Active Roles
-
Subcommand – UPDATE oder WRITETEXT
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
73
|
Auditevent Number 73. Recorded automatically and not controlled via "audit options".
|
Activated when switching on an Auditing Parameter using the
stored procedure
sp_configure.
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
74
|
Auditevent Number 74. Recorded automatically and not controlled via "audit options".
|
Activated when switching off an Auditing Parameter using the
stored procedure
sp_configure.
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
76
|
security
|
When the
System Security Officer (SSO)
resets a password.
|
-
Roles – Active Roles
-
Subcommand – When setting the sso password.
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Loginname
-
Proxy Information – The original login_name, if set proxy is set.
|
|
80
|
security
|
proc_role within a
system stored procedure
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – Required Roles
-
Proxy Information – The original login_name, if set proxy is set.
|
|
81
|
dbcc
|
dbcc
|
-
Roles – Active Roles
-
Subcommand – The description of a dbcc Subcommand
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
82
|
security
|
sp_configure
|
-
Roles – Active Roles
-
Subcommand – Description of the Configuration Parameter.
-
Original/Previous Value – If the command sets a new parameter, the old value is stored here.
-
Current Value – If the command sets a new parameter, the new value is stored here.
-
Additional Information
-
If parameters are set, the number of configuration parameters is stored here.
-
If a configuration file is used to change parameters, the name of the file is stored here.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
83
|
security
|
online database
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
84
|
setuser
|
setuser
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – The name of the set user.
-
Proxy Information – The original login_name, if set proxy is set.
|
|
85
|
func_obj_access, func_dbaccess
|
Access to an object and a database via a
Transact-SQL Function
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
85
|
security
|
valid_user
|
-
Roles – Active Roles
-
Subcommand – valid_user
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|
|
88
|
security
|
set proxy
or
set session authorization
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – The old/original/previous suid
-
Current Value – The new suid
-
Additional Information – NULL
-
Proxy Information – If set proxy or set session authorization
have not received any parameters, the original login_name will be stored here.
In all other cases this will be
NULL
|
|
92
|
cmdtxt
|
All actions of a specific user or of a user with a specific role will be stored here.
|
-
Roles – Active Roles
-
Subcommand – NULL
-
Original/Previous Value – NULL
-
Current Value – NULL
-
Additional Information – NULL
-
Proxy Information – The original login_name, if set proxy is set.
|