...
Event | Trace Events (.trc) | Extended Events (.xel) | Audit Logs (.audit) |
---|
ApplicationName | Available | Available | Unavailable |
ColumnPermissions | Available | Unavailable | Available |
BeforeAfter | Available | Available | Unavailable |
DatabaseID | Available | Available | Available |
DatabaseName | Available | Available | Available |
DBUserName | Available | Unavailable | Available |
EventClass | Available | Available | Available |
EventSequence | Available | - | Available |
EventSubClass | Available | Available | Available |
FileName | Available | Unavailable | Available |
HostName | Available | Available | Unavailable |
IsSystem | Available | Available | Unavailable |
LinkedServerName | Available | Unavailable | Unavailable |
LoginName | Available | Available | Available |
NestLevel | Available | Available | Available |
ObjectID | Available | Unavailable | Available |
ObjectName | Available | Unavailable | Available |
ObjectType | Available | Unavailable | Available |
OwnerName | Available | Unavailable | Unavailable |
ParentName | Available | Unavailable | Unavailable |
Permissions | Available | Unavailable | Available |
ProviderName | Available | Unavailable | Unavailable |
RoleName | Available | Unavailable | Unavailable |
RowCounts | Available | Available | Unavailable |
ServerName | Available | Available | Available |
SessionLoginName | Available | Available | Available |
SPID | Available | Available | Available |
StartTime | Available | Available | Available |
Success | Available | Unavailable | Available |
TargetLoginName | Available | Unavailable | Available |
TargetUserName | Available | Unavailable | Available |
TextData | Available | Available | Available |
Note |
---|
title | Extended Events captures extra Execute events |
---|
|
Due to differences in how Microsoft has implemented Extended Events compared to other auditing methods, when auditing via Extended Events the user will see extra Execute events as compared to the same data captured by other auditing methods. |
Note |
---|
|
- The Extended Events auditing feature is only available with SQL Server 2012 and newer.
- The Audit Logs auditing feature is only available with SQL Server 2017 and newer.
|
SQL Compliance Manager Calculated Columns
Depending on your auditing selection SQL Compliance Manager allows you to capture the following calculated columns event data type.
Event | Trace Events (.trc) | Extended Events (.xel) | Audit Logs (.audit) |
---|
alertLevel | Available | Available | Available |
appNameId | Available | Available | Unavailable |
details | Available | Unavailable | Available |
endSequence | Available | Available | Available |
endTime | Available | Available | Available |
eventCategory | Available | Available | Available |
hash | Available | Available | Available |
hostId | Available | Available | Unavailable |
loginId | Available | Available | Available |
privilegedUser | Available | Available | Available |
startSequence | Available | Available | Available |
targetObject | Available | Unavailable | Available |