MS SQL Server Audit Event: 24000

MS SQL Server Auditing Tool

Databases are critical to enterprises because they store confidential data. Hence it becomes important to monitor database logs. But manually auditing them is a herculean task because of the enormous amount of log data generated. ManageEngine's EventLog Analyzer is a comprehensive log management tool that makes it easy for you to monitor all database activities, audit user accesses, track database server account changes, and ensure integrity of confidential data stored, especially in your MS SQL server database.

SQL » 24000: SQL audit event

24000: SQL audit event

Event 24000 occurs when any logon or logoff operation or management change is performed on an SQL server. This event includes important information, like the: 

  • Date and time at which an auditable action was performed.
  • Name, primary identifier, and class type of the entity on which an audit occurred. The entity might be a server object, database, database object, or schema object.
  • Permissions that were granted, denied, or revoked (if it was a management operation).
  • Session identifier of the event.