D SQL Server 2000 Database Auditing

The SQL Server 2000 Audit agent module requires you configure the SQL Server Profiler prior to creating component rule sets using the SQL Sever 2000 Audit module. Follow these steps to configure the SQL Server Profiler:

1. Open the SQL Profiler by clicking Start --> Programs --> Microsoft SQL Server --> Profiler

2. From the top menu bad select File --> New --> Trace

3. The Connect to SQL Server window will display. Enter the IP address of the SQL Server, Login name and Password and click OK.

4. In the resulting Trace Properties window, under the General tab, enter a name in the Trace Name field.

5. Select the Events tab. Under the Available Event Classes window expand the Objects node. Select the following elements and click the Add >> button.

   • Object:Closed

   • Object:Created

   • Object:Deleted

   • Object:Opened

   Do the same for all elements under the Security Audit node.

6. Select the Data Columns tab. In the Unselected data window, select the following elements, and click the Add >> button. Asterisked (*) elements may already be added.

   
   EventClass *DatabaseNameDBUserNameHostNameLoginSidNTDomainNameObjectNameObjectTypeOwnerNameServerNameTextDataApplication Name ObjectNameObjectTypeOwnerNameServerNameTextData *Application Name *NTUserName *LoginName*SPID*StartTime*

7. Click Run