Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
pwcphoto
Yak Posting Veteran
69 Posts |
 Posted - 2005-05-03 : 06:28:06
|
| Is there a way to get more meaningful data and track where logins are coming from? My event application log is filling up bad login for SA. I am not sure if it is coming from one of the local web servers, a workstation on our network or somehow from out of our network. It doesn't tell me what password if any is being tried or what the IP address is that it is coming from if there is one.None of our machines is set up here to use the SA login, it may be something local to the SQL server itself that is trying but not making it.Any input would be appreciated.Phil-----------------------I used to be a rocket scientist. Now I'm just a space cadet... |
|
|
mr_mist
Grunnio
1870 Posts |
Posted - 2005-05-03 : 06:33:56
|
| You can run a SQL Profiler trace with login failure auditing, it should record the IP or name of the computer that the attempts come from.-------Moo. :) |
 |
|
|
|
|
|
Event log filling up with sa login error