Audit values

Table 3 lists the values that appear in the event column, arranged by sp_audit option. The “Information in extrainfo” column describes information that might appear in the extrainfo column of an audit table, based on the categories described in Table 3.

Table 3: Values in event and extrainfo columns

Audit option

Command to be audited

Event

Information in extrainfo output

alter

alter table

3

Keywords or options:

  • ADD/DROP/MODIFY COLUMNS

  • REPLACE COLUMN

  • ADD CONSTRAINT

  • DROP CONSTRAINT

If one or more encrypted columns are added, keywords contains:

ADD/DROP/MODIFY COLUMNS column1/keyname1, [,column2/keyname2]

where keyname is the fully qualified name of the key.

create

create table

10

For encrypted columns, keywords contain column names and keynames.

EK column1/keyname1[,column2 keyname2]

where EK is a prefix indicating that subsequent information refers to encryption keys and keyname is the fully qualified name of the key.

encryption_key

sp_encryption

106

Keywords contain ENCR_ADMIN system_encr_passwd password ******** if password is set the first time, and contains ENCR_ADMIN system_encr_passwd password ******** ******** if the password is subsequently changed.

create encryption key

107

Keywords contain:

algorithm Name-bitlength/IV [RANDOM|NULL]/PAD [RANDOM|NULL]

For example: AES-128/IV RANDOM/PAD NULL

alter encryption key

108

Keywords contain:

NOT DEFAULT

if key no longer the default key.

DEFAULT 

if the key is made the default key

drop encryption key

109