Netwrix Auditor For SQL Server Quick Start Guide

NETWRIX AUDITOR FOR SQL
SERVER
QUICK-START GUIDE
Copyright 2014 Netwrix Corporation. All Rights Reserved.
January 2014
Product Version: 5.0
Netwrix Auditor for SQL Server Quick-Start Guide
Page 2 of 17

Copyright 2014 Netwrix Corporation. All Rights Reserved
Suggestions or comments about this document? www.netwrix.com/feedback
Legal Notice
The information in this publication is furnished for information use only, and does not constitute a
commitment from Netwrix Corporation of any features or functions discussed. Netwrix Corporation
assumes no responsibility or liability for the accuracy of the information presented, which is subject
to change without notice.
Netwrix is a registered trademark of Netwrix Corporation. The Netwrix logo and all other Netwrix
product or service names and slogans are registered trademarks or trademarks of Netwrix
Corporation. Active Directory is a trademark of Microsoft Corporation. All other trademarks and
registered trademarks are property of their respective owners.
Disclaimers
This document may contain information regarding the use and installation of non-Netwrix products.
Please note that this information is provided as a courtesy to assist you. While Netwrix tries to ensure
that this information accurately reflects the information provided by the supplier, please refer to the
materials provided with any non-Netwrix product and contact the supplier for confirmation. Netwrix
Corporation assumes no responsibility or liability for incorrect or incomplete information provided
about non-Netwrix products.
2014 Netwrix Corporation.
All rights reserved.
Page 3 of 17

Table of Contents
1. INTRODUCTION ............................................................................. 4
1.1. Overview ........................................................................... 4
1.2. How This Guide Is Organized .................................................... 4
1.3. Free Pre-Sales Support ........................................................... 4
1.4. Key Features and Benefits ....................................................... 4
1.5. Product Workflow ................................................................. 5
2. INSTALLING NETWRIX AUDITOR FOR SQL SERVER ........................................... 6
2.1. Installation Prerequisites ........................................................ 6
2.1.1. . Hardware Requirements ................................................. 6
2.1.2. . Software Requirements .................................................. 6
2.1.3. . Supported Environments ................................................. 6
2.2. Installing Netwrix Auditor for SQL Server...................................... 7
3. CONFIGURING MANAGED OBJECT ........................................................... 8
4. RUNNING THE INITIAL DATA COLLECTION .................................................. 14
5. MONITORING SQL SERVER FOR CHANGES .................................................. 15
5.1. Making Test Changes ............................................................. 15
5.2. Receiving a Change Summary .................................................. 15
A APPENDIX: RELATED DOCUMENTATION ..................................................... 17

Page 4 of 17

1. INTRODUCTION
1.1. Overview
This guide is intended for the first-time users of Netwrix Auditor for SQL Server. It is designed
for evaluation purposes, therefore it is recommended to read it sequentially and following the
instructions in the order they are provided. After reading this guide you will be able to:
Install and configure Netwrix Auditor for SQL Server
Create a Managed Object
Run data collection
See how changes to the monitored SQL Server are reported.
For evaluation purposes, this guide only covers basic configuration and usage options of the
SQL Server Auditing feature. For information on how to use other product features, refer to the
corresponding documentation (see Appendix: Related Documentation for links).
1.2. How This Guide Is Organized
This section explains how this guide is organized and provides a brief overview of each chapter.
Chapter 1 Introduction is the current chapter. It explains the purpose of this document,
defines its audience and explains its structure. This chapter also provides an overview
of Netwrix Auditor for SQL Server, lists its main features and benefits, and explains
the product workflow.
Chapter 2 Installing Netwrix Auditor for SQL Server lists all hardware and software
requirements for the Netwrix Auditor for SQL Server installation and explains how to
setup the product.
Chapter 3 Configuring Managed Object explains how to configure a Managed Object
that represents the audited SQL Server.
Chapter 4 Running the Initial Data Collection explains how to run data collection to
perform the initial analysis of the monitored SQL Servers current configuration state.
Chapter 5 Monitoring SQL Server for Changes provides instructions on how to make
test changes to the audited SQL Servers configuration, and see how they are reported
by the product.
Appendix: Related Documentation contains a list of all documents published to support
Netwrix Auditor for SQL Server.
1.3. Free Pre-Sales Support
You are eligible for free technical support during the evaluation period. If you encounter any
problems, or would like assistance with the installation, configuration or implementation of
Netwrix Auditor for SQL Server, contact Netwrix support specialists.
1.4. Key Features and Benefits
Netwrix Auditor for SQL Server helps you perform the following auditing and reporting tasks:
Monitor day-to-day administrative activities: the product captures detailed
information on all changes made to the monitored SQL Servers configuration and
database contents, including the information on WHO changed WHAT, WHEN and
WHERE. Reports also contain the before and after values for each change.
Page 5 of 17

Sustain compliance by using in-depth change information. Audit data can be archived
and stored for more than 7 years.
Netwrix Auditor for SQL Server includes the following features:
Table 1: Netwrix Auditor for SQL Server Features Overview
Feature Description
SQL Server Auditing Netwrix Auditor allows tracking and reporting on all changes made to
your SQL servers configuration and database content.
Windows Server Auditing Netwrix Auditor allows tracking and reporting on all changes made to
Windows servers configuration, including hardware devices, drivers,
software, services, applications, networking settings, registry settings
and more.
Event Log Management Netwrix Auditor allows automatic consolidating, alerting and archiving
even logs data. It collects Windows event logs and syslog events from
multiple computers across the network, stores them centrally in a
compressed format, and enables convenient analysis of event log data
and rich reporting capabilities.
User Session Activity
Monitoring
Netwrix Auditor allows capturing a video of the users activity on the
monitored computers and writing a detailed activity log, which helps
analyze how changes to your IT infrastructure are made. Netwrix Auditor
allows searching inside video recordings and jumping to a specific
timestamp to watch how certain actions were performed. It also provides
detailed user activity reports; moreover, video records can be integrated
into change reports on different audited systems.
1.5. Product Workflow
A typical Netwrix Auditor for SQL Server data collection and reporting workflow is as follows:
1. An administrator configures a Managed Objects and sets the parameters for automated
data collection and reporting.
2. Netwrix Auditor for SQL Server registers all changes to SQL Servers configuration and
database content, events and users activity and writes this data to a local file-based
storage, referred to as the Audit Archive.
3. The product emails daily Change Summaries listing all changes (with their before and
after values), events and recorded user sessions.
4. If the Reports functionality is enabled and configured, data is imported from the Audit
Archive to a dedicated SQL database. Reports based on audit data can be viewed via
the Netwrix Auditor Console or in a web browser.
Page 6 of 17

2. INSTALLING NETWRIX AUDITOR FOR SQL SERVER
2.1. Installation Prerequisites
Netwrix Auditor for SQL Server can be installed on any computer in the domain where the
audited SQL Servers are located. For advanced deployment scenarios, refer to Netwrix Auditor
for SQL Server Administrators Guide.
2.1.1. Hardware Requirements
Before installing Netwrix Auditor for SQL Server, make sure that your hardware meets the
following requirements:
Table 2: Netwrix Auditor for SQL Server Hardware Requirements
Hardware Component Minimum Recommended
Processor Intel or AMD 32 bit, 2GHz Intel Core 2 Duo 2x 64 bit, 2GHz
Memory 2GB RAM 8GB RAM
Disk space 250MB physical disk space
for product installation.
Additional space is
required for the Audit
Archive and depends on
the number of AD objects
and changes per day.
Two physical drives with a total of
50GB free space
* These are rough estimations. The actual required memory size depends on the
average number of changes per day in the audited environment.
2.1.2. Software Requirements
The table below lists the software requirements for Netwrix Auditor for SQL Server. Make sure
that this software has been installed before proceeding with the installation.
Table 3: Netwrix Auditor for SQL Server Software Requirements
Target System Required Software
Operating System
Windows XP SP3 (both 32-bit and 64-bit systems)
and above
Additional software
.NET Framework 3.5
Windows Installer 3.1 or above
2.1.3. Supported Environments
This section lists the requirements to the audited environment:
Table 4: Requirements to the Audited Environment
Feature Supported Environments
SQL Server Auditing
Microsoft SQL Server 2000
Microsoft SQL Server 2008 R2
Page 7 of 17

Event Log Management
Windows 2000 or above
Red Hat Enterprise Linux 5, Ubuntu 11, Ubuntu
Server 11
Any Linux/Unix system using Syslog
Windows Server Auditing Computers running Windows XP SP 3 and above
User Session Activity Monitoring
2.2. Installing Netwrix Auditor for SQL Server
Procedure 1. To install Netwrix Auditor for SQL Server
1. Download Netwrix Auditor 5.0.
2. Unpack the Netwrix_Auditor_Enterprise_Edition package.
3. Click the Install button.
4. Follow the instructions of the installation wizard. When prompted, accept the license
agreement and specify the installation folder.
5. On the last step, click Finish to complete the installation.
Netwrix Auditor shortcuts will be added to the Start menu and the Netwrix Auditor console
will open.
Page 8 of 17

3. CONFIGURING MANAGED OBJECT
To start auditing your SQL Servers, you need to configure a Managed Object to define the scope
of the monitored environment.
Procedure 2. To create and configure a Managed Object
1. In the Netwrix Auditor console, select the Managed Objects node in the left pane. The
Managed Objects page will be displayed:
Figure 1: Managed Objects Page

2. Click Create New Managed Object in the right pane. Alternatively, right-click the
Managed Objects node and select New Managed Object from the pop-up menu to start
the New Managed Object wizard.
3. On the Select Managed Object Type step, select Computer Collection as the Managed
Object type and click Next.
Figure 2: New Managed Object: Select Managed Object Type

Page 9 of 17

4. On the Specify Default Data Processing Account step, click the Specify Account
button. In the dialog that opens, enter the default Data Processing Account credentials
that will be used by Netwrix Auditor for data collection. The name should be specified
in the following format: domain_name\account_name. For evaluation purposes, it is
recommended to specify a domain admin account. For details on the rights and
permissions required for this account, refer to the following KB article: Data Processing
Account Rights and Permissions.
Figure 3: New Managed Object: Specify Default Data Processing Account

5. On the Configure Email Settings step, specify the email settings that will be used for
Change Summary delivery:
Figure 4: New Managed Object: Configure Email Settings

Page 10 of 17

The following parameters must be specified:
Table 5: Email Settings Parameters
Parameter Description
SMTP server name Enter your SMTP server name.
Port Enter your SMTP server port number.
Sender address
Enter the address that will appear in the From field in
reports and Change Summaries.
To check the email address, click Verify. The system will
send a test message to the specified address and will
inform you if any problems are detected.
Use SMTP authentication
Select this check box if your mail server requires the SMTP
authentication.
User name Enter a user name for the SMTP authentication.
Password Enter a password for the SMTP authentication.
Confirm password Confirm the password.
Use Secure Sockets Layer
encrypted connection (SSL)
Select this check box if your SMTP server requires SSL to be
enabled.
Use Implicit SSL connection
mode
Select this check box if the implicit SSL mode is used,
which means that SSL connection is established before any
meaningful data is sent.
6. On the Specify Computer Collection step, enter your Managed Object name:
Figure 5: New Managed Object: Specify Domain Name

7. On the Select Target Systems step, make sure that SQL Servers is selected under
Target Systems:
Page 11 of 17

Figure 6: New Managed Object: Add Modules

8. On the Configure Reports Settings step, deselect the Enable Reports option:
Figure 7: New Managed Object: Reports Settings

Note: The Reports functionality is not covered in this guide, as it only touches upon
the basic product features. For instructions on how to configure and view SSRS-based
reports, refer to Netwrix Auditor for SQL Server Administrators Guide).
9. On the Add Items to Computer Collection step, click the Add button to start the New
Item wizard. On the Select Item Type step, make sure SQL Server Instance is selected
and click Next:
Page 12 of 17

Figure 8: Computer Collection New Item: Select Item Type

10. On the Specify Items step, select the This SQL Server instance option and specify the
name of the server you want to audit:
Figure 9: Computer Collection New Item: Specify Items

11. On the next step, review your new item settings and click Finish. The specified SQL
Server instance will be added to the audited computer collection.
Page 13 of 17

12. On the Configure SQL Server Change Reporter Settings step, click the Add button
under SQL Server Configuration Audit Change Summary recipients and specify your
email address:
Figure 10: New Managed Object: Configure SQL Server Change Reporter Settings

It is recommended to click the Verify button. The system will send a test message to
the specified email address and will inform you if any problems are detected.
13. On the last step, review your Managed Object settings and click Finish. A confirmation
message will be displayed.
The newly created Managed Object will appear under the Managed Objects node, and
its details will be displayed in the right pane:
Figure 11: The Managed Object Page

Page 14 of 17

4. RUNNING THE INITIAL DATA COLLECTION
When you have added and configured a Managed Object, Netwrix Auditor for SQL Server starts
collecting data on SQL Server changes and writes it to the Audit Archive, a local file-based
storage. When the first data collection is performed, the initial snapshot of the monitored
servers current state is created. Netwrix Auditor uses this information as a benchmark to
generate change reports.
After you have configured a Managed Object, launch data collection manually to avoid waiting
for a scheduled run.
Procedure 3. To launch a data collection task
1. In the Netwrix Auditor console, expand the Managed Objects node, and select your
Managed Object.
2. In the right pane, click Run.
Note: Depending on the size of your monitored AD environment, creation of an
initial snapshot may take quite long.
After the initial data collection task has completed, an email notification is sent to the specified
recipient(s) like in the example below:
Figure 12: Initial Analysis Notification

Page 15 of 17

5. MONITORING SQL SERVER FOR CHANGES
5.1. Making Test Changes
Now that the product has collected a snapshot of the audited SQL Servers current
configuration, you can make test changes to see how they are reported.
Note: Before making any test changes to your SQL Servers configuration, ensure
that you have the domain administrators rights, and that the changes conform to
your security policy.
5.2. Receiving a Change Summary
After you have made test changes to the audited SQL Servers configuration, you can see how
these changes are reported.
By default, Netwrix Auditor emails a Change Summary to the specified recipient(s) daily at 3:00
AM. The Change Summary lists all changes that occurred in the last 24 hours and provides the
WHAT, WHO, WHERE and WHERE details for every change.
To avoid waiting for a scheduled Change Summary delivery, you can generate it manually. To
do this, launch a data collection task manually as described in Procedure 3 To launch a data
collection task. After the task has completed, a Change Summary will be generated and sent
to the specified email address:
Figure 13: Change Summary Example

The Change Summary provides the following information for each change:
Table 6: Change Summary Fields
Parameter Description
Change Type
Shows the type of action that was performed on the SQL
Server resource. The values are:
Page 16 of 17

Added
Removed
Modified
Resource Type
Shows the type of the SQL Server resource that was
modified, e.g. Server Role.
When Changed Shows the exact time when the change occurred.
Who Changed
Shows the name of the account under which the change
was made.
Workstation The name of the computer where the change was made.
Server The name of the modified SQL Server instance.
Resource Name The name of the resource that was modified.
Details Shows the before and after values for the modified object.
Page 17 of 17

A APPENDIX: RELATED DOCUMENTATION
The table below lists of documentation published to support Netwrix Auditor for SQL Server:
Table 7: Product Documentation
Document Name Overview
Netwrix SQL Server Change Reporter
Administrators Guide
Provides detailed instructions on how to configure
and use the SQL Server Auditing feature of Netwrix
Auditor.
Netwrix Auditor for SQL Server
Troubleshooting Guide
Contains a list of issues that users may encounter
with SQL Server auditing, and provides
explanations and instructions on how to fix them.
Installing Microsoft SQL Server and
Configuring the Reporting Services
This technical article provides instructions on how
to install Microsoft SQL Server 2005/2008/2008 R2
Express and configure the Reporting Services.
Netwrix Windows Server Change Reporter
Installation and Configuration Guide.
Provides detailed instructions on how to set up the
Windows Server Auditing feature of Netwrix
Auditor.
Netwrix Windows Server Change Reporter
Provides detailed instructions on how to use the
Windows Server Auditing feature of Netwrix
Auditor.
Netwrix Event Log Manager Installation and
Configuration Guide
Event Log Management feature of Netwrix Auditor.
Netwrix Event Log Manager Administrators
Guide
Event Log Management feature of Netwrix Auditor.
Netwrix User Activity Video Reporter
Installation and Configuration Guide
User Session Activity Monitoring feature of Netwrix
Auditor.
Netwrix User Activity Video Reporter
User Session Activity Monitoring feature of Netwrix
Auditor.

Netwrix Auditor For SQL Server Quick Start Guide

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Netwrix Auditor For SQL Server Quick Start Guide

Hochgeladen von

Copyright:

Verfügbare Formate

NETWRIX AUDITOR FOR SQL

Das könnte Ihnen auch gefallen