Forum Discussion
How to stop auditing of a certain event
Hello, We currently have millions of the following log being spammed in Event Viewer, application logs. This log itself is not very useful in our opinion so we would like to stop it being generat...
You have correctly identified this as a SQL Audit event.
Which means it's from an audit configured on the SQL Server instance.
Ask your DBA to check the Server Audit Specifications, and verify if you need auditing of "SUCCESFUL_LOGIN_GROUP".
https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions?view=sql-server-ver16#:~:text=SUCCESSFUL_LOGIN_GROUP
Which means it's from an audit configured on the SQL Server instance.
Ask your DBA to check the Server Audit Specifications, and verify if you need auditing of "SUCCESFUL_LOGIN_GROUP".
https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-action-groups-and-actions?view=sql-server-ver16#:~:text=SUCCESSFUL_LOGIN_GROUP
Thanks for the reply. I have just looked into the documentation you linked and it seems SUCCESSFUL _LOGIN_GROUP covers all login events. Which I assume would cover the login events from the actual users as well, not just the event above. We can't disable it, so we will look into other possibilities