Design a job for Login failure alert

Question

HI,
     I need a query to get Login failure alert for both windows login and SQL login account. Also i need track to which database the Login user is connecting while he is getting Login failure error. I need to to schedule this as a job.

Answer 1

To check what database was being used when the login failed, you will need to use default trace as mentioned in the link below:-
http://www.eraofdata.com/the-sql-server-default-trace/
or simply run the query below:-
SELECT  TE.name AS [EventName] ,
        v.subclass_name ,
        T.DatabaseName ,
        t.DatabaseID ,
        t.NTDomainName ,
        t.ApplicationName ,
        t.LoginName ,
        t.SPID ,
        t.StartTime ,
        t.SessionLoginName
FROM    sys.fn_trace_gettable(CONVERT(VARCHAR(150), ( 
                SELECT TOP 1
                f.[value]
                FROM    sys.fn_trace_getinfo(NULL) f
                WHERE   f.property = 2)), DEFAULT) T
        JOIN sys.trace_events TE 
                ON T.EventClass = TE.trace_event_id
        JOIN sys.trace_subclass_values v 
                ON v.trace_event_id = TE.trace_event_id
                AND v.subclass_value = t.EventSubClass
WHERE   te.name IN ( 'Audit Login Failed' )
order by t.StartTime desc
The only other way would be to use Auditing, Server Side Trace or Triggers if you want to maintain history of these. 
Reference:
http://sqlrows.blogspot.in/2011/10/note-to-self.html
Please mark the answer as helpful if i have answered your query. Thanks and Regards, Kartar Rana