24000: SQL audit event
Event 24000 occurs when any logon or logoff operation or management change is performed on an SQL server. This event includes important information, like the:
- Date and time at which an auditable action was performed.
- Name, primary identifier, and class type of the entity on which an audit occurred. The entity might be a server object, database, database object, or schema object.
- Permissions that were granted, denied, or revoked (if it was a management operation).
- Session identifier of the event.