Viewing SQL server Audit logs
Log File viewer is a native tool that is used to view SQL Server logs from either the local or a remote instance. This tool has access to various types of log files including audit logs, data logs, database mail, job history, maintenance plans and SQL server agent. It accesses the audit logs from default data directory of the SQL server instance.
In the Log File Viewer, the logs are displayed regardless of whether the logs are written to a file or to the Windows Event Log. The views can be customized using Filter option, available at the top. It also allows for the export of logs in a comma-delimited .log file format since the SQL Server file logs are saved in .sqlaudit format which is not readable.
To view server audit logs In Log File viewer
- Navigate to SQL Server Management Studio >> Object Explorer >> Security.
- Right-click the audit object that you want to view and select View Audit Logs from the dropdown box.
To view logs that are related to general SQL Server activity
- In Object Explorer, expand Management.
- Expand SQL Server Logs, right-click any log file, and select View SQL Server Log.
ManageEngine's EventLog Analyzer, a comprehensive log management tool, audits both SQL server and SQL database. It provides out-of-box reports, real-time alerts and even an intuitive dashboard. You can drill down to the logs, filter reports, customize alerts, perform log searches, and archive logs for powerful and effective management of SQL Servers. Click here to know to more.
