SQL Server Audit Log Event ID 24388
24388: Issued an alter external model command (action_id AL; class_type EM)
This is an event from
SQL Server
audit event from
LOGbinder SQL
generated by
.
On this page
An alter external model command was issued
Free Security Log Resources by Randy
| Field |
Description |
| Occurred |
When event was reported by SQL Server. |
| Authorization result |
If the command passed authorization checks. |
| Session ID |
ID of the session on which the event occurred. |
| User |
User |
| Server |
Server |
| Database |
Database affected by the event. |
| Target object |
|
| |
ID |
Target object ID |
| |
Name |
Target object name |
| |
Permission bitmask |
Target object permission bitmask |
| Statement |
Transact-SQL statement |
Supercharger Enterprise
Load Balancing for Windows Event Collection
This Event Is Produced By
Which Integrates with Your SIEM
Issued an alter external model command
An alter external model command was issued
Action Group: DATABASE_OBJECT_CHANGE_GROUP
Occurred: 5/26/2026 3:07:42.0000000 AM
Authorization result: Access allowed
Session ID: 74
User: LAB\tuser
Server: lab-sql-13\SQLEXPRESS2025
Database: TestDatabase
Original Context
Server login: LAB\tuser
Database user: dbo
Target Context
ID: 65551
Database user: MyAiModel
Statement: ALTER EXTERNAL MODEL [MyAiModel] SET (PARAMETERS = '{"temperature": 0.5}');
For more information, see http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=24388
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection