This tab allows you to configure how the SQLcompliance Agent manages the trace files that contain collected events for auditing.

If you are modifying properties for a SQLcompliance Agent that is auditing a virtual SQL Server, SQLCompliance Manager applies your changes to the active node in the cluster hosting the virtual SQL Server. SQLcompliance Agent properties are later replicated from the active node to the passive nodes.

Available fields

SQLcompliance Agent Trace Directory

Provides the directory path under which the SQLcompliance Agent stores trace files.

Trace Collection Options

Allows you to specify the following settings:

      • The rollover size (MB) at which the SQLcompliance Agent should send the current trace file to the Collection Server, and create a new trace file to continue collecting events
      • Time interval (minutes) at which the SQLcompliance Agent should send full trace files to the Collection Server
      • Maximum time (minutes) that should elapse before the SQLcompliance Agent sends existing trace files to the Collection Server (if no trace files have been received during the normal collection interval)
      • Maximum time (seconds) that should elapse before the SQLcompliance Agent's attempt to stop or start a trace file times out and returns a failure. By default, the timeout value is 30 seconds. Ensure this setting does not exceed the specified collection interval.

Trace Tamper Detection Options

Allows you to specify the amount of time (seconds) that should pass before the SQLcompliance Agent automatically restarts the SQL trace. The SQLcompliance Agent detects whether the trace has been stopped, modified, paused, or deleted by another application. After the specified tamper detection interval, the SQLcompliance Agent restarts the trace and records the trace status to the application event log.

Trace Directory Size Limit

Allows you to specify the maximum size threshold (GB) for the directory where you are storing the trace files. The directory size is checked at each heartbeat. To effectively manage the directory size, ensure you allow ample room to accommodate your auditing needs and set the SQLcompliance Agent heartbeat interval at a low frequency.

Unattended Auditing Time Limit

Allows you to specify the maximum time threshold (days) for allowing the SQLcompliance Agent to run without receiving a heartbeat.

 

SQL Compliance Manager audits all activity on your server. Learn more > >
  • No labels