SQL Server Audit Action Group: SERVER_STATE_CHANGE_GROUP

This group tracks state changes (start, pause, stop, resume) on the SQL Server service in Windows.

LOGbinder SQL events generated under this Audit Action Group:

Event ID	Description
24054	Started SQL server
24055	Paused SQL server
24056	Resumed SQL server
24057	Stopped SQL server

 

Upcoming Webinars Cutting through the Hype: What is Big Data Security Analytics? Top 6 Security Events to Monitor in SQL Server Top 10 Security Events to Monitor in SharePoint

Additional Resources Security Log Quick Reference Chart Learn about the SharePoint Audit Log Patch Tuesday Analysis

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard