How to send alert on SQL Shutdown due to Audit Failure
0
votes
2
answers
1393
views
Looking for a way to implement this STIG. What method should I use to monitor SQL Server, when it is shutdown due to "Shutdown on Audit Failure"?
SQL Server must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.
I have found Event ID: **33219**
Parameters:
- Cannot store a password, so difficult to use "Windows Scheduled Task"
- On a domain, remember not able to store a password
- PowerShell script:
$recipients = ","
Send-MailMessage -To $recipients -Subject "SQL Audit Failure" -Body "SQL has shutdown due to Audit Failure." -SmtpServer NameOrIPAddress -From SQLEmail@domain.tld -Priority High
Asked by Keybonesabi
(21 rep)
Jun 17, 2021, 10:58 PM
Last activity: Apr 30, 2024, 02:54 PM
Last activity: Apr 30, 2024, 02:54 PM