SQL Server Audit Log Event ID 24053
24053: Audit session changed (action_id AUSC)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
An audit session was changed
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server |
| Session ID |
ID of the session on which the event occurred |
| User |
|
| Server |
|
| Statement |
Transact-SQL statement |
| Additional information |
Any additional information about the event, stored as XML. |
Supercharger Enterprise
Load Balancing for Windows Event Collection
This Event Is Produced By
Which Integrates with Your SIEM
Audit session changed
An audit session was changed
Action Group: AUDIT_CHANGE_GROUP
Occurred: 8/22/2013 6:08:10.0000000 PM
Session ID: 67
User: LB\Administrator
Server: DEV3
Statement: n/a
Additional information: <action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"><session><![CDATA[TestServerAudit$A]]></session><action>event disabled</action><object><![CDATA[audit_event]]></object></action_info>
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24053
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection