SQL Server Audit Log Event ID 24331
24331: Issued a create external file format command (action_id CR; class_type EF)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
A command to create an external file format was issued
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server. |
| Authorization result |
If the command passed authorization checks. |
| Session ID |
ID of the session on which the event occurred. |
| User |
User |
| Server |
Server |
| Database |
Database affected by the event. |
| Statement |
Transact-SQL statement |
Setup PowerShell Audit Log Forwarding in 4 Minutes
This Event Is Produced By
Which Integrates with Your SIEM
Issued a create external file format command
A command to create an external file format was issued
Action Group: DATABASE_OBJECT_CHANGE_GROUP
Occurred: 11/8/2016 2:07:57.0000000 AM
Authorization result: Access allowed
Session ID: 196
User: TEST\Admin
Server: STAGING\SQLSERVER2016
Database: master
Statement: CREATE EXTERNAL FILE FORMAT textdelimited1 ; WITH ( ; FORMAT_TYPE = DELIMITEDTEXT, ; FORMAT_OPTIONS ( ; FIELD_TERMINATOR = '|', ; DATE_FORMAT = 'MM/dd/yyyy' ), ; DATA_COMPRESSION = 'org.apache.hadoop.io.compress.GzipCodec' ; )
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24331
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection