sql-server - What are differences between audit action groups of AUDIT SPECIFICATION and audit event class of sql tracer in Microsoft SQL Server?

Question

I want to know differences between audit action groups of AUDIT SPECIFICATION and audit event class of SQL Tracer in Microsoft SQL Server.

I intend to implement a logging program by setting audit event class through sp_trace_setevent procedure.

Using audit event class of SQL Tracer, how much performance is decreased relative to using audit action groups of AUDIT SPECIFICATION?

I also wish to know differences of action mechanism between them.

Answer 1

根据 MSDN，Server 级和 Datavase 级审计操作组都是类似于 SQL Server 安全审计事件类的操作。您可以在此处找到等效操作组和事件类的列表：SQL Server Audit Action Groups and Actions

SQL Server 审计功能的开销比使用 SQL 跟踪审计要轻，但总体影响取决于数据库的繁忙程度以及要审计的事件数量