SQL Server Audit Action Group: DATABASE_OPERATION_GROUP

Available in		New to:
Database Audit Specification	Server Audit Specification	2012	2016
•	•

This group tracks the execution of certain database operations involving database impersonation, checkpoints and the use of SHOWPLAN.

LOGbinder for SQL Server events generated under this Audit Action Group:

Event ID	Description
24038	Issued a database authenticate command
24039	Issued a database checkpoint command
24040	Issued a database show plan command
24041	Issued a subscribe to query information command
24042	Issued a view database state command

Upcoming Webinars

Identity-First Security for AI Agents: Defending a New Attack Surface Across Cloud and SaaS
Forget Prompt Injection: Your First M365 Copilot Security Job Is Paying Off Years of Permission Debt

Additional Resources

Audit Policy

•	Server Audit Specification
•	Database Audit Specification
•	Audit Action Groups
•	Audit Actions
•	Audit Policy Wizard

User name:
Password:
	/ Forgot?
	Register

May 2026 Patch Tuesday	"Patch Tuesday - Surprise! No Zero Days This Month! " - sponsored by Action1

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2026 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.