Applies To: Microsoft SQL Server 2008 or later Enterprise edition

Overview

MS SQL Server is Microsoft’s relational database management system with a large number of features and services. With this coverage, there is a large surface area for attack and vulnerabilities. EventTracker utilizes both server audit specifications or extended events to address requirements for compliance, analyze database actions to troubleshooting problems and investigate suspicious user activity.

EventTracker Knowledge Pack for Microsoft SQL allows you to monitor the following:-

• Operations - Monitor and track the DDL changes happening at the databases, tables, views, procedures, triggers and schema.
• Security - Monitor and track suspicious user activities at the database such as query errors, user status change, extended or audit session status change and identify SQL injection when co-related with IIS report.
• Compliance - Monitor and track critical compliance requirements such as password change, user logon status, permission change and role alteration.

Previous Next

Once Microsoft SQL is configured to deliver events to EventTracker Manager by employing extended events or audit specifications; alerts, reports and dashboards can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Scope

The configurations detailed in this guide are consistent with EventTracker Enterprise version 7.X and later, Microsoft SQL Server 2008 or later Enterprise edition.

Documentation:

For more information please refer the Integration guide