IDERA SQL Compliance Manager offers different auditing options, each option allows you to audit specific types of SQL Server event data.
If you choose to audit via Extended Events or Audit Logs, the unavailable information will be gathered from the Trace Events.
Depending on your auditing selection SQL Compliance Manager allows you to capture the following types of event data.
| Event | Trace Events (.trc) | Extended Events (.xel) | Audit Logs (.audit) |
|---|---|---|---|
| ApplicationName | Available | Available | Unavailable |
| ColumnPermissions | Available | Unavailable | Available |
| BeforeAfter | Available | Available | Unavailable |
| DatabaseID | Available | Available | Available |
| DatabaseName | Available | Available | Available |
| DBUserName | Available | Unavailable | Available |
| EventClass | Available | Available | Available |
| EventSequence | Available | - | Available |
| EventSubClass | Available | Available | Available |
| FileName | Available | Unavailable | Available |
| HostName | Available | Available | Unavailable |
| IsSystem | Available | Available | Unavailable |
| LinkedServerName | Available | Unavailable | Unavailable |
| LoginName | Available | Available | Available |
| NestLevel | Available | Available | Available |
| ObjectID | Available | Unavailable | Available |
| ObjectName | Available | Unavailable | Available |
| ObjectType | Available | Unavailable | Available |
| OwnerName | Available | Unavailable | Unavailable |
| ParentName | Available | Unavailable | Unavailable |
| Permissions | Available | Unavailable | Available |
| ProviderName | Available | Unavailable | Unavailable |
| RoleName | Available | Unavailable | Unavailable |
| RowCounts | Available | Available | Unavailable |
| ServerName | Available | Available | Available |
| SessionLoginName | Available | Available | Available |
| SPID | Available | Available | Available |
| StartTime | Available | Available | Available |
| Success | Available | Unavailable | Available |
| TargetLoginName | Available | Unavailable | Available |
| TargetUserName | Available | Unavailable | Available |
| TextData | Available | Available | Available |
Extended Events captures extra Execute events
Due to differences in how Microsoft has implemented Extended Events compared to other auditing methods, when auditing via Extended Events the user will see extra Execute events as compared to the same data captured by other auditing methods.
NOTE
- The Extended Events auditing feature is only available with SQL Server 2012 and newer.
- The Audit Logs auditing feature is only available with SQL Server 2017 and newer.
SQL Compliance Manager Calculated Columns
Depending on your auditing selection SQL Compliance Manager allows you to capture the following calculated columns event data type.
| Event | Trace Events (.trc) | Extended Events (.xel) | Audit Logs (.audit) |
|---|---|---|---|
| alertLevel | Available | Available | Available |
| appNameId | Available | Available | Unavailable |
| details | Available | Unavailable | Available |
| endSequence | Available | Available | Available |
| endTime | Available | Available | Available |
| eventCategory | Available | Available | Available |
| hash | Available | Available | Available |
| hostId | Available | Available | Unavailable |
| loginId | Available | Available | Available |
| privilegedUser | Available | Available | Available |
| startSequence | Available | Available | Available |
| targetObject | Available | Unavailable | Available |