audits$This is a view in the mssqlsystemresource database.
CREATE VIEW sys.audits$ AS
SELECT
au.id AS audit_id,
au.name AS name,
g.guid AS audit_guid,
au.created AS create_date,
au.modified AS modify_date,
r.indepid AS principal_id,
au.type AS type,
n.name AS type_desc,
convert(tinyint, au.intprop) AS on_failure,
pv.name AS on_failure_desc,
sysconv(bit, sysconv (int, au.status) & 0x1) AS is_state_enabled,
sysconv(int, qd.value) AS queue_delay,
au.status AS status
FROM master.sys.sysclsobjs au
LEFT JOIN master.sys.sysguidrefs g ON g.class = 5 AND g.id= au.id AND g.subid = 0 -- GRC_AUDITGUID
LEFT JOIN sys.syssingleobjrefs r ON r.depid = au.id AND r.class = 69 AND r.depsubid = 0 -- SRC_AUDITOWNER
LEFT JOIN master.sys.sysobjvalues qd ON qd.valclass = 38 AND qd.objid = au.id AND qd.subobjid = 0 AND qd.valnum = 1 -- SVC_AUDITPROPS/AUDIT_QUEUE_DELAY
LEFT JOIN sys.syspalnames n ON n.class = 'AULT' AND n.value = au.type
LEFT JOIN sys.syspalvalues pv ON pv.class = 'AUSD' AND pv.value = au.intprop
WHERE au.class = 64 -- SOC_SECAUDIT
AND has_access('SA', 0) = 1 |
|
|