SQL Server Audit Action Group: BROKER_LOGIN_GROUP

This group tracks login sessions associated with transport security connections between service broker end points.

This action group is server level only.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24273	Issued use service broker transport security command

 

Upcoming Webinars Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard