Versions Compared

Old Version 1

changes.mady.by.user Nadja Pollard

Saved on

compared with

New Version 2

changes.mady.by.user Nadja Pollard

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Instance Summary
The SQL Compliance Manager Instance Summary tab displays the status of audit activity for a particular SQL Server instance in your environment. Use the statistics and graphs on this tab to quickly and easily identify server-level issues so you can continue to ensure the correct level of compliance.
Understanding Server Status
Status
Indicates whether SQL CM encountered any issues while auditing this SQL Server instance.
If a system alert is triggered, the status displays as critical. System alerts notify you when the health of your SQL CM deployment may be compromised. For more information, see the Activity Log tab.
Last Heartbeat
Provides the most recent date and time that the SQLcompliance Agent deployed for this instance contacted the Collection Server.
Last Archived
Provides the most recent date and time that events collected for this instance were archived.
Processed Events
Displays the number of audit events stored in the Repository event databases for the selected time span. This number does not include events previously archived or groomed.
Recent Alerts
Displays the number of alerts generated for events collected from this instance during the specified time span.
Understanding the Server Activity Report Card status
Each tab of the Server Activity Report Card provides an auditing status for the corresponding event category. You can use this status to help you determine whether you are effectively auditing events on this SQL Server instance.
You can also use auditing thresholds to display critical issues or warnings should a particular activity, such as privileged user events, be higher than expected. These thresholds can notify you about issues related to increased activity levels, such as a security breach, that may be occurring on this instance. Use thresholds to supplement the alert rules you have configured for this instance.

Status Type

Indication

Meaning

Audited without thresholds

gray check

This event category is being audited on instances in your environment but auditing thresholds have not been set for this event category.
Consider setting audit thresholds so you can track peaks in activity and identify any suspicious events.

Critical

red icon

The event activity during the selected time span is higher than the defined critical threshold.
To see more information about this activity, navigate to the Audit Events tab and search for events in the event category that is flagged. You can view the detailed properties of an event by double-clicking the listed event.

OK

green check

This event category is being audited on instances in your environment and auditing thresholds have been set for this event category.

Not audited

red icon

This event category is not being audited on instances in your environment even though auditing thresholds have been set for this event category.
To track this activity, change your audit settings to include the corresponding event category.
To ignore this activity, disable the auditing threshold set for this event category.

Not audited and no thresholds set

gray circle

This event category is not being audited on any instances in your environment. Auditing thresholds have not been set for this event category.
Review whether you need to audit and track this activity on any of your SQL Server instance.

Warning

yellow icon

The event activity during the selected time span is higher than the defined warning threshold.
To see more information about this activity, navigate to the Audit Events tab and search for events in the event category that is flagged. You can view the detailed properties of an event by double-clicking the listed event.

...