Quantcast
Channel: Active questions tagged audit - Database Administrators Stack Exchange
Viewing all articles
Browse latest Browse all 147

How to send alert on SQL Shutdown due to Audit Failure

$
0
0

Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"?

SQL Server must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.

I have found Event ID: 33219

Parameters:

  • Cannot store a password, so difficult to use "Windows Scheduled Task"
  • On a domain, remember not able to store a password
  • PowerShell script:
 $recipients = "<FirstRecipient@domain.tld>,<NextRecipient@domain.tld>" Send-MailMessage -To $recipients -Subject "SQL Audit Failure" -Body "SQL has shutdown due to Audit Failure." -SmtpServer NameOrIPAddress -From SQLEmail@domain.tld -Priority High

Viewing all articles
Browse latest Browse all 147

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>