Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Audited SQL Servers Summary tab (Management Console) displays the status of audit activity across your SQL Server environment. Use the statistics and graphs on this tab to quickly and easily identify issues so you can continue to ensure the correct level of compliance.

Image Modified

Understanding System Status

...

Clicking the status link opens the more detailed Registered SQL Servers tab under Administration. Use this tab to view the status of audited databases on this instance, validate audit settings, and check the SQL Compliance Manager Agent status.
 

Status TypePossible Causes
Alert/Error
  • The Repository is installed on a SQL Server 2005 instance but a SQL Compliance Manager Agent is deployed to a SQL Server 2012 or later instance. For example, to audit activity on instances running SQL Server 2005, install a second Repository on a SQL Server 2005 instance.
  • A version 1.1 SQL Compliance Manager Agent is deployed to a SQL Server 2005 or later instance. Version 1.1 does not support auditing SQL Server 2005 instances. To continuing auditing SQL Server 2005 instances, upgrade the agents to the latest version.
  • The SQL Compliance Manager Agent missed every heartbeat over the last 24 hours. This issue occurs when the SQL Compliance Manager Agent service is stopped, the Collection Server is offline, the computer hosting the agent is offline, or network availability is lost.
  • The SQL Compliance Manager Agent service is no longer running. The SQL Compliance Manager Agent service is stopped by a SQL Server login or a third-party application.
  • A system alert is triggered. System alerts notify you when the health of your SQL Compliance Manager deployment may be compromised. For more information, see the Activity Log tab.
OKSQL Compliance Manager is performing as expected.
Warning
  • No SQL Server instances are registered with SQL Compliance Manager. SQL Compliance Manager cannot begin auditing your environment until instances are registered, SQL Compliance Manager Agents are deployed, and audit settings are configured.
  • The SQL Compliance Manager Agent is not yet deployed to an instance that is registered with SQL Compliance Manager. SQL Compliance Manager cannot audit this instance until an agent is deployed and audit settings are configured.
  • A deployed SQL Compliance Manager Agent has not yet contacted SQL Compliance Manager. This issue occurs when the SQL Compliance Manager Agent service is stopped, the computer hosting the agent is offline, or network availability is lost.
  • A deployed SQL Compliance Manager Agent missed two sequential heart beats. This issue occurs when the SQL Compliance Manager Agent service is stopped, the computer hosting the agent is offline, or network availability is lost.

Registered SQL Servers

Displays the number of SQL Server instances that are registered with SQL Compliance Manager.

...

You can also use auditing thresholds to display critical issues or warnings should a particular activity, such as privileged user events, be higher than expected. These thresholds can notify you about issues related to increased activity levels, such as a security breach, that may be occurring on this instance. Use thresholds to supplement the alert rules you have configured for your environment.

Status TypeIndicationMeaning
Audited without thresholdsgray checkThis event category is audited on instances in your environment, but auditing thresholds are not set for this event category.
Consider setting audit thresholds so you can track peaks in activity and identify any suspicious events.
Criticalred iconThe event activity during the selected time span is higher than the defined critical threshold.
To see more information about this activity, navigate to the Audit Events tab and search for events in the flagged event category. You can view the detailed properties of an event by double-clicking the listed event.
OKgreen checkThis event category is audited on instances in your environment and auditing thresholds are set for this event category.
Not auditedred iconThis event category is not audited on instances in your environment even though auditing thresholds are set for this event category.
To track this activity, change your audit settings to include the corresponding event category.
To ignore this activity, disable the auditing threshold set for this event category.
Not audited and no thresholds setgray circleThis event category is not audited on any instances in your environment. Auditing thresholds are not set for this event category.
Review whether you need to audit and track this activity on any of your SQL Server instance.
Warningyellow iconThe event activity during the selected time span is higher than the defined warning threshold.
To see more information about this activity, navigate to the Audit Events tab and search for events in the event category that is flagged. You can view the detailed properties of an event by double-clicking the listed event.

Understanding the Enterprise Activity Report Card tabs

...

Register SQL Server

Starts the New Registered SQL Server wizard, allowing you to enable and configure auditing on another SQL Server instance.

Monitor

Opens the Change Log tab under Administration, allowing you to monitor what types of changes are made to audit settings across your environment.

Configure Access

Opens the SQL Logins tab under Administration, allowing you to control who has access to view and report on audit data or change configuration settings.

Self-Audit

Allows you to perform an integrity check on the audit data currently stored in Repository.

Configure Alerting

Opens the Alert Rules tab under Administration, allowing you to configure alerting to track specific activity on SQL Server instances across your environment.

...

Allows you to change the number of days (time span) for which the Summary tab displays status, alerts, and activity. By default, this tab displays data for the last seven days.



Scroll pdf ignore
SQL Compliance Manager monitor, audit and alert on SQL user activity and data changes.
Newtabfooter
aliasIDERA
urlhttp://www.idera.com
 | 
Newtabfooter
aliasProducts
urlhttps://www.idera.com/productssolutions/sqlserver
 
Newtabfooter
aliasPurchase
urlhttps://www.idera.com/buynow/onlinestore
 | 
Newtabfooter
aliasSupport
urlhttps://idera.secure.force.com/
 | 
Newtabfooter
aliasCommunity
urlhttp://community.idera.com
 
|
 
Newtabfooter
aliasResources
urlhttp://www.idera.com/resourcecentral
 | 
Newtabfooter
aliasAbout Us
urlhttp://www.idera.com/about/aboutus
 
Newtabfooter
aliasLegal
urlhttps://www.idera.com/legal/termsofuse

...