sql server 2008 audit by thomas larock april 24 th, 2010

26
SQL Server 2008 Audit by Thomas LaRock April 24 th , 2010

Upload: andrew-strickland

Post on 19-Jan-2016

221 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

SQL Server 2008 Audit

byThomas LaRockApril 24th, 2010

Page 2: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

Who Am I?

•Database Administrator•Ten+ years experience•SQL MVP•PASS Board of Directors•Twitter: @SQLRockstar•http://thomaslarock.com

Page 3: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

http://dbasurvivor.com/

Page 4: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 5: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 6: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 7: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 8: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 9: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 10: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 11: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 12: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 13: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

Pre-SQL 2008 Options

•Failed Logins•Triggers•C2•SQL Trace

Page 14: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

SQL Server 2008 Audit

• New feature• Design considerations– Security– Performance–Management–Discoverability

Page 15: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 16: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 17: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

Demo

Page 18: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 19: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 20: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 21: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 22: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

Discoverability

• Log Viewer– Uses TVF to select from audit trail

• Event Viewer• Operations Manager• Custom Reporting– SQLCAT– http://sqlcat.codeplex.com/

wikipage?title=sqlauditcentral&referringTitle=Home

Page 23: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

For More Information

• http://msdn.microsoft.com/en-us/library/dd392015.aspx

• http://thomaslarock.com/presentations

• http://speakerrate.com/talks/3021-sql-server-2008-audit

Page 24: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

• http://www.sqlpass.org/24hours/2010/

Page 25: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010
Page 26: SQL Server 2008 Audit by Thomas LaRock April 24 th, 2010

THANK YOU!