SQL Monitor account in Windows Security Log

SQL Server performance monitoring and alerting

Moderators: eddie davis, priyasinha, Adam, chriskelly, Chris Lambrou, Chris Spencer

SQL Monitor account in Windows Security Log

Postby joffwilliams » Wed Mar 27, 2013 4:16 pm

When browsing the Security Log of the Windows Event log, there are a lot of entries referencing the domain service account used by SQL Monitor. To be more objective - it's not unusual to see ten to twelve entries for a single second.

Is this normal? Is there anything that can be done to reduce it? It's introducing a lot of noise to the signal when I'm browsing the security logs.
Jonathan Williams
Database Administrator
City of Spokane, WA
joffwilliams
 
Posts: 13
Joined: Tue Mar 27, 2012 4:10 pm
Location: Spokane, WA

Postby chriskelly » Thu Mar 28, 2013 6:53 pm

Thank you for your post.

What kind of entries are being logged? Are they login failures?
Chris Kelly
Technical Support Engineer
chriskelly
 
Posts: 330
Joined: Mon Apr 19, 2010 1:44 pm
Location: Cambridge, UK

Re:

Postby joffwilliams » Thu Mar 28, 2013 6:59 pm

chriskelly wrote:What kind of entries are being logged? Are they login failures?


Login successes - hence the frequency of them.
Jonathan Williams
Database Administrator
City of Spokane, WA
joffwilliams
 
Posts: 13
Joined: Tue Mar 27, 2012 4:10 pm
Location: Spokane, WA

Postby chriskelly » Thu Apr 04, 2013 2:41 pm

The frequency of the login will be related to the data collection schedule. The only way to reduce this, and by association the number of these messages being logged is to change the polling schedule. Otherwise, you should be able to filter the messages when viewing the event log. But unfortunately there is no way (as far as I am aware) to prevent the messages being logged in the first place.
Chris Kelly
Technical Support Engineer
chriskelly
 
Posts: 330
Joined: Mon Apr 19, 2010 1:44 pm
Location: Cambridge, UK


Return to SQL Monitor 3

Who is online

Users browsing this forum: No registered users and 0 guests