I would like to enable the SQL login auditing but do NOT want the resulting records in the Application Event Viewer Log,  The Event Log on my server is completely filled up with auditing info, makes it very hard -almost impossible- to track any other events. Is there a way to achieve this?

By default, SQL Server writes all day-to-day operations including startup, shutdown, backups, server-side traces, audit login activity to the Windows Application log. I also see these info written in the SQL Error Logs\SQL Server. Are these two the same?

Thank you.

You can use /n to disable all logging to the event viewer. See using startup options.

However this does disable all logging and is not something i would recommend.

Another approach to capture your audit information is that you could setup a trace and let it write to a table that just captures login & logout events.

Cheers


A