How To Configure SQL Server Audit Events To The Security Log

Microsoft reference Link

How to configure SQL audit logs in to windows security
1.Add SQL Server instance service account to below
Local PoliciesUser Rights AssignmentManage auditing and security logadd user or group.
Local PoliciesUser Rights Assignment Generate security auditsadd user or group.
Note:gpupdate /force to make changes effective from CMD

2.Take RDP where SQL Server is installed and Regedit and move to below and provide full permission to Instance service account.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security
Note:Restart SQL Server to make changes effective.
3.Configure the audit object access setting in Windows using auditpol[Optional]
open Command Prompt with administrator permissions and execute the following statement:
auditpol /set /subcategory:"application generated" /success:enable /failure:enable

Note: Restart SQL Server to make changes effective.

4.Create and any sql server security audit event and test it.

============================
SELECT event_time,action_id, statement, database_name, server_principal_name
FROM fn_get_audit_file( 'D:\Test\Audit-*.sqlaudit' , DEFAULT , DEFAULT)-- where action_id != 'LGIS'
============================

[SandhyaAdhav-gd]

Thank you so much as per my request you have made the video on audit logs.

[leongcheechong]

Hi Friend
What is your recommend "Audit Action Type " we should use it ?
For the security purpose.

[Gangadharraotummala]

can you provide how to enable the all database audits

[sahayaclaston]

How to find the audit log using query I have search the view history it's still loading

[SajjadAli-vhgm]

Hi,
Could you please make video on SQL server licensing?
Thank You