third party logging tool

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

sg - 30 Sep 2008 14:02 GMT

Hi,

Because of SOX, I need a tool to monitor database users logon/logoff, data
changes so on. If I use sql profiler, it will create too much overhead to the
server. Is there any third party tool that anyone knows is good?

Thanks a lot,
Sarah

Reply to this Message

Tibor Karaszi - 30 Sep 2008 14:18 GMT

If you are on 2008 and Enterprise Edition, then you might want to use the built-in functionality for
auditing. It has a very low overhead.
CREATE SERVER AUDIT...
CREATE SERVER AUDIT SPECIFICATION...
CREATE DATABASE AUDIT SPECIFICATION...

Signature

Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi

> Hi,
>
[quoted text clipped - 4 lines]
> Thanks a lot,
> Sarah

Reply to this Message

sg - 30 Sep 2008 14:51 GMT

Hi Tibor,

Thanks for your response. We are using sql 2000 and 2005. Is there any tool
that we can use creating low overhead?

Thanks,
sarah

> If you are on 2008 and Enterprise Edition, then you might want to use the built-in functionality for
> auditing. It has a very low overhead.
[quoted text clipped - 10 lines]
> > Thanks a lot,
> > Sarah

Reply to this Message

Tibor Karaszi - 30 Sep 2008 15:02 GMT

Then those tools need to get the information from somewhere. That source can be triggers, profiler
trace and/or sniffing the transaction log. Another possibility is to sniff at the network layer
(although I don't know if any auditing tool does that since it would also require parsing both TDS
as well as the SQL submitted). I believe that many of the log reader tool manufacturers also offer
some auditing tool. Lumigent comes to mind, but I suggest you Google to find out current state of
affairs....

Signature

Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://sqlblog.com/blogs/tibor_karaszi

> Hi Tibor,
>
[quoted text clipped - 19 lines]
>> > Thanks a lot,
>> > Sarah

Reply to this Message

Susan Cooper - 30 Sep 2008 15:25 GMT

Idera's Compliance Manager handles auditing for sox compliance. I learned
about the product after moving to a company that's privately owned, so I
haven't played with the product since we don't have to play sox audits here.
It looked good from what I read about it though.

http://www.idera.com/Products/SQLcm/Default.aspx

Hope that helps.
-Susan

> Hi,
>
[quoted text clipped - 4 lines]
> Thanks a lot,
> Sarah

Reply to this Message

sg - 30 Sep 2008 16:39 GMT

Thanks everyone, the information are very helpful for me.

Sarah

> Idera's Compliance Manager handles auditing for sox compliance. I learned
> about the product after moving to a company that's privately owned, so I
[quoted text clipped - 14 lines]
> > Thanks a lot,
> > Sarah

Reply to this Message

TheSQLGuru - 30 Sep 2008 19:02 GMT

ApexSQL Log.

Disclaimer: I have a close relationship with Apex, use their products and
recommend them to my clients. Also, if you care to you can mention
TheSQLGuru sent you you will get a discount and my daughter will get a few
coins for her college fund.

Signature

Kevin G. Boles
Indicium Resources, Inc.
SQL Server MVP
kgboles a earthlink dt net

> Hi,
>
[quoted text clipped - 5 lines]
> Thanks a lot,
> Sarah

Reply to this Message