I have server level auditing on SQL Server 2014.Why am I receiving database-level audit events (such as SELECT, INSERT, UPDATE, DELETE, etc.), even though there are no database audit specifications?
I see these, for example running the following command:
SELECT *FROM fn_get_audit_file('\Audit\*', DEFAULT, DEFAULT)WHERE [action_id] = 'SL'
But I have not specified database auditing. The following commands come back with no results:
SELECT * FROM sys.database_audit_specificationsSELECT * FROM sys.database_audit_specification_details
It's on Microsoft SQL Server 2014 Standard (SP1-GDR) - 12.0.4237.0