ACS could collect windows security event log but could not collect SQL audit log by default. but if we configure SQL 2008 to write its log to windows security event log, ACS could collect these logs and produce reports, right? Do we need any customization of SCOM for this? Thanks.

Hi, ACS will collect all events from the security event. That is with default settings, you could configure a filter on the acs collector to drop some events and not store them in the acs database. But with default settings everything from the security log is collected and stored in the acs database. I thin kthat SQL will log to the application log, nog to the security log. There are partners that have add-ons to ACS to collect other logs then the security log.Anders Bengtsson | Microsoft PFE | blog at http://www.contoso.se

Hi, Please refer the following link: http://www.sqldbatips.com/showarticle.asp?ID=134 SQL could log to Windows Security Event Log so I am woudering ACS could collect SQL log in this way?