Solved

login info in sql error log

Posted on 2011-03-01
6
404 Views
Last Modified: 2012-05-11
is there a reason why sql server does not put the corresponding login in error log.? they put spid, but a spid that is weeks old - is it useful to anyone?

thanks
0
Comment
Question by:anushahanna
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 39

Accepted Solution

by:
BrandonGalderisi earned 167 total points
ID: 35010553
Well you are reviewing logs that are weeks old :D.  Is it necessary to know the login for which an error occurred?  If you are trying to track down some sort of security breach, the error log will likely not help.
0
 
LVL 40

Assisted Solution

by:lcohan
lcohan earned 333 total points
ID: 35011677
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35015714
>>Is it necessary to know the login for which an error occurred?
at least that is more helpful than a SPID, not? :)

>>security breach, the error log will likely not help.
so what is the best bet to check something for security audit, when it was not pre-planned- what is the best we have in SServer?
0
Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

 
LVL 6

Author Comment

by:anushahanna
ID: 35015720
lcohan, helpful with parameters -thank you.
0
 
LVL 40

Assisted Solution

by:lcohan
lcohan earned 333 total points
ID: 35018107
[
>>Is it necessary to know the login for which an error occurred?
at least that is more helpful than a SPID, not? :)
]
I would use SQL profiler and in there you select hostname, loginname, error, and any other columns you want then run it filtered where error > 0. SQL Logs have different purpose.

[
>>security breach, the error log will likely not help.
so what is the best bet to check something for security audit, when it was not pre-planned- what is the best we have in SServer?
]


your OS event viewer has detailed info about any "security breach"
0
 
LVL 6

Author Comment

by:anushahanna
ID: 35030254
very fine - thanks!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
In the first part of this tutorial we will cover the prerequisites for installing SQL Server vNext on Linux.
This videos aims to give the viewer a basic demonstration of how a user can query current session information by using the SYS_CONTEXT function
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question