audit generate duplicate on event application log

bibi92
bibi92 used Ask the Experts™
on
Hello,

The following audit generate duplicate event on Windows application log, why ?
CREATE SERVER AUDIT [ApplicationLog_Logon]
TO APPLICATION_LOG
WITH
(      QUEUE_DELAY = 1000
      ,ON_FAILURE = CONTINUE
      ,AUDIT_GUID = 'ed3842b-ea77-4547-a77f-c8874785874''
)
WHERE (NOT [server_principal_name] like 'NT SERVICE\SQLAgent$%')
ALTER SERVER AUDIT [ApplicationLog_Logon] WITH (STATE = ON)
GO

Thanks

regards
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
check you sql server (via SSMS ) - properties- > Security-> Login audit
you may have this set to track all logins too

more:

Auditing Failed Logins in SQL Server
https://www.mssqltips.com/sqlservertip/1735/auditing-failed-logins-in-sql-server/

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial