Re: The error log that ate the server!!!!!

From: Wayne Snyder (wayne.nospam.snyder_at_mariner-usa.com)
Date: 07/27/04


Date: Tue, 27 Jul 2004 07:30:23 -0400

You can do this in profiler, but I suspect it would be more efficient to do
it as you are... There is no way to filter outside of profiler, short of
writing some program that would read/re-write the log after you have cycled
it...

You might also check your NT application log, that is probably growing due
to this also..

-- 
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Cathy Finnegan" <eliminates_spam_caeriel1@cablespeed.com> wrote in message
news:q7oag0pvd049flbkhlb40q56dp3cv4mhkd@4ax.com...
> I'v got a vexing problem.  I've been able to implement a SQLServer Agent
job that launches every 20 seconds.  The
> function of this job is to kick off illegal users using a specified
userid. Since I can't intercept the login the best I
> can do is to terminate illegal users before they can get into my
databases....  Job launches every 20 seconds and
> performs exactly as expected.
>
> The problem I'm having is the job logs in as "sa" every 20 seconds, I set
my security audit level to  all so this job is
> blowing up my error log.  I want to be able to monitor other logins and
events so setting the audit level to something
> less than "all" is not desirable.  Is there some way I can selectively
eliminate a specific login from being monitored
> and ending up in the error log??
>
> Right now I'm cycling the error log every 12 hours just to keep it
manageable
>
> SQL Server 7 on Windows NT 4.
>
>
> Any help or suggestions is greatly appreciated.
>
> TIA,
> cathy


Relevant Pages

  • Re: Cant connect to SQL server in Windows XP SP2
    ... Thanks, I'm not sure how to turn on login auditing, but using profiler is a ... > monitor for login failures in Profiler. ... >>vague about sql server does not exist or access denied. ... >>Chris Pankhurst ...
    (microsoft.public.sqlserver.connect)
  • Retrieve the IP Address from a Failed Login Attempt
    ... Is there a way to configure SQL Server or even Profiler to ... save or retrieve the IP Address of the system failing to ... Login failed for user 'sa'. ...
    (microsoft.public.sqlserver.security)
  • Re: User and Login auditing
    ... You can use Profiler to do this. ... If you are on SQL Server ... look at Profiler and the Securiity Audit Event ... >Does anyone know how I can audit user and login adding, ...
    (microsoft.public.sqlserver.security)
  • Re: Audit Login Failed Event
    ... Audit Login option is limited with info on the structure of the Windows ... You can get more info, including comuter name, with Profiler. ... Dejan Sarka, SQL Server MVP ...
    (microsoft.public.sqlserver.security)
  • method to get more info for failed login
    ... We are currently tracking SQL Server login failures. ... error log only give infomation about which login has been attempted failed. ...
    (microsoft.public.sqlserver.server)