Fn_get_audit_file: Multiple Login Entries

Hello.  I posted this question on a different forum site and as of yet have not yet been able to isolate the problem.  I hope that I'm not violating any forum protocols by reasking this question again albeit with different information.  This
appears to be a more appropriate site.
I set up my audit (server & database) process in a file (as opposed to a Security or Application Log) and have been successful at viewing this data from the sys.fn_get_audit_file file (see tsql below).
Select *
From sys.fn_get_audit_file ('path',default,default)
Where action_id in('DL','IN','SL','UP') --database oriented
      or action_id in('LGFL','LGSD','LGIS','LGIF')  -- server oriented
Prior to running this extract, I ran four sql commands (i.e. update statement, insert statement, select statement & delete statement) and these four are showing up on my fn_get_audit_file extract.  However, the login records are enormous - some
2,000 already.  It appears that they are all action_id=LGIS.  The event_time on these entries are only miliseconds apart.  Sorta like my laptop is pinging the server several times per second and thus blowing up my login records.
I've opened SQL Server Profile and it appears that each time I run a select statement referencing server data (like the fn_get_audit_fil select statement from above) a new login line is created.  As far as i know I'm not logging in but perhaps to SQL
Server's point of view I am.
Any thoughts?
Dea

Follow Up:
(excerpt from Pradeep Adiga @ http://blogs.msdn.com/b/sqlserverfaq/archive/2014/12/07/capture-successful-logins-you-may-see-many-entries-high-volume-when-you-create-audit-for-successful-login-group-action-group.aspx)
When you are auditing successful logins attempts using SUCCESSFUL_LOGIN_GROUP action group through SQL Audit, you will see that there will be too many entries in the audit file.
You may see this behavior for successful logins when connections are made through SQL Server Management Studio. This occurs because for every successful login through SSMS you will have other corresponding connections made at the background. For example
•   Object Explorer  
•   Query Editor Window   
•   Solution Explorer etc.
Hence successful logins for every such connection will also be recorded.
Workaround:
Unfortunately SQL Auditing does not have filtering option to remove connections coming from SSMS – object explorer etc.

Similar Messages

  • MULTIPLE LOGIN WITH SAME USER ID

    Hi,
    As per my understanding, multiple login to the portal with the same user id and password is allowed.
    Now,
    1. Is it possible to disbale this in the portal so that user can login to the portal only once?
    2. Is it possible to allow specified no of logins with the same user id?
    Any response is highly appreciated.
    regards,
    Chandra

    What you're trying to do just doesn't work that well with any web application, let alone NW.  There are various problems with trying to restrict the number of sign ons:
    If a user signs into the portal and then walks away, they are unable to sign in again from another workstation.  What if they want to give a demo to a user elsewhere in the company while they're still signed in at their desk?  This is really just a user-issue, but an annoying one that will almost certainly drive certain users nuts.
    What if the user's web browser crashes (an unfortunately common occurence).  They can't sign in again until their session times out.  Either that, or they call the portal admin to clear out their session (how?  I don't know).  The portal admin probably has better things to do than cleaning up orphan sessions.
    If a user can't sign in multiple times, they can always open a related browser session, thereby having multiple entry points into the portal.
    So, in short, you really can't enforce a 'sign in once' rule.  By association, you therefore can't restrict them to a maximum number of sign-ins either...
    Hope that helps you out.  Points are always good

  • Multiple logins on one computer - Different accounts, same picture...?

    Greetings,
    Since the iPhone 3.0 recently released push notifications, I decided to open an account for my wife that she could use on her iPhone. From what I understand, iChat now allows multiple logins on each computer.
    I set everything up accordingly, noted that I am the admin on this computer, my picture pops into my ichat name. If I then enable her account on the same computer, her login also pops up next to my window. This is working according to plan.
    However, if I try to change the picture on her ichat window it also changes on mine. What am I doing wrong here?
    Cheers...

    Hi,
    iChat can not display different Buddy Pics for different Buddy Lists.
    This may change with Snow Leopard.
    Click the iChat Menu and use the Feedback option and post your wish there.
    iChat can use one of 4 Buddy pics.
    You can set a Pic in the iChat Buddy List by clicking on the current one and using the edit features.
    If there is not one in the Address Book for yourself And this tends to be the one selected in System Preferences > Accounts > Your account although you can set them to be different (Three choices so far) it will default to one for the account type (A Running yellow man for AIM, A Blue Globe for @mac.com names and the Cloud for MobileMe names).
    Apple have tended to suppose that if two or more people are going to be using a Mac that there are then Mac User Accounts set up on the computer and therefore there is no issue with Buddy Pics.
    The iChat Buddy List is held on the AIM server (AIM names, @Mac.com [email protected] ones).
    Part of the process is that the local Buddy list compares this to the Address Book and Add the Real names you have entered.
    So only this name in the Address Book on that computer will show Real names if entered.
    You can Export the Address Book on one computer and Import on the other to get them the same. (Or Sync via MobileMe if you have an Account)
    You are getting in to the realms of your wife's Buddies being in your Address Book.
    Did I mention another Mac User Account ?
    10:31 PM Thursday; June 25, 2009

  • Using a single iTunes library with multiple logins.

    I've setup my iMac to have multiple logins for everyone in my family. I'd like everyone to use the same iTunes library, though, so that all purchases and playlists can be seen and used by everyone. I have it so that everyone has the same files, but not the same library. That is, the playlists don't come through on the other logins, and purchases made from one login don't translate to another.
    I'm not trying to rip anyone off, I just want my whole family to have the same library.
    Is this possible?

    padrepablo wrote:
    Thanks much, but I've done that. That method shares FILES but not the LIBRARY
    Then you missed a step or two.
    The steps above share the entire iTunes library (media, artwork, playlists, library file, Genius files, everything).
    In the Music/iTunes folder on everyone's login is a file called iTunes Library.itl.
    Yes, and holding Option and selecting Choose library allows you to select which iTunes library you want to use.
    THAT is the file I want to share, but I can't seem to move it.
    The steps above will do exactly what you want.
    All users will use the exact same iTunes library.
    You need to hold Option and select Choose library (notice is says, "Library").
    Once you copy your /Music/iTunes/ folder to /Users/Shared/ folder, everyone can delete /Username/iTunes/ folder.

  • Multiple logins on one account...

    Is there any way to have multiple login/passwords connect to the same account in the Room Console?
    Is the login/password tied to a particular account URL? Or can I setup two accounts to access the same account URL?
    thanks
    -sandy

    hi Nigel,
    We have multiple developers working on a project and the Room Console is a great asset in debugging. Right now we are just sharing one login, which isn't ideal, but isn't the end of the world either.
    I think the best solution is probably to build out the Local Server so that it has a RoomConsole. (And can be instantiated from AS3 for unit tests.)
    What is the workflow that you guys use for development? Do you use the LocalServer or do you use a server? Or do you have some internal tools that you haven't shared yet?
    -sandy

  • Multiple logins - can they access the same iTunes library?

    I have multiple logins on my Mac with Leopard. Our families iTunes library resides on my account. I set up separate accounts for them to protect my documents and such. However, when they launch iTunes, the library is blank. Can I point them to the library on the main account somehow so we don't have duplicate files.

    Have a look at this page: iTunes: How to share music between different accounts on a single computer

  • How to see, if some user has done multiple login at the same time

    Hi,
    i'm looking for a tcode to see, if some user has done multiple login in a date-range.
    Regards, Dieter

    It is also dependent on your license type, as it is populated at logon - prior to any Z-coding option - which will cause a lockout if attempted an access that way.
    I recently found a cool way to detect DB triggers and updates - very obscure...
    However I also "move around" during support in projects and don't always want to kick myself out. I guess SAP can "work-it-out" from the various fields of the table to map the user behaviour.
    Personally I dont believe that all of such information is appropriate for public domain, as all the SAP_ALLers out there combined with the types of authentication options are not always responsible with the information either.
    Thankfully, SAP has added a "salt" to the password hashes now. They offer RZ11 login/password_downwards_compatibility as a workaround...
    Take a look in your system!
    Cheers,
    Julius

  • IOS 8 - iCloud Keychain with Multiple Login Accounts for a Site

    I use iCloud Keychain to store multiple login accounts for a single website.
    When using Safari on a Mac, the last login account I used for that site is prepopulated in yellow fields. If I want to change the login account, I clear the field with the login ID and I see a dropdown of all of the login accounts available for that site.
    When using Safari on iOS 7, the last login account I used is prepopulated (just like with the Mac), but if I want to use a different login account, I need to enter enough characters in the login ID field for Safari to know which login account I want to use and then it autofills using that account.
    Now, with iOS 8, all I get is the last login account I used. I can't figure out how to autofill any of my other login accounts for that site.
    I'm pretty sure I'm doing something wrong, but I can't figure it out. Any suggestions would be appreciated.
    Thanks.
    Mike

    Mike:
    Did you ever find a solution for this? I just noticed the same behavior.
    -emde

  • Is it possible to disable multiple logins?

    Is it possible to disable multiple logins by the same user on different computers? I have network hosted user accounts. I need a way to NOT make it possible for user A to go to client Mac A, login and leave himself logged in there then go to client Mac B and login there also. This is creating some unpleasant effects on the server - naturally!
    Any easy way to accomplish this? Perhaps through Profile Manager?
    Thanks!

    Simon,
    Thanks for the reply but I need some elaboration.... "the "Login" preferences for users and groups".... what exactly are we referring to? I don't see such option (or atleast the way it's written), in either Server app or Profile Manager. Are we talking about the same OS X version?
    Thanks.
    P.S. Despite the fact that I have enabled the option in Profile Manager to logout all users on all computers after 30 minutes of inactivity, I have noticed that the iMac clients don't log out the users after the said time...

  • Can I have multiple text entry boxes on one slide?

    Can I have multiple text entry boxes on one slide, each with it's own possible answer without having to have a separte submit button for each?
    Message was edited by: Suzanne Petty

    I'm using Captivate 5 - I'm thinking I would like to put two or three text entry boxes on one slide - say labeled Name, Email and Company I'd like to have any answer be accepted, yet I still want to have the answers included with the quiz reporting for our main quiz which I set up using a question pool.
    I understand I can uncheck the validate user input box in the general menu in the property inspector, but that also makes the reporting menu inactive for the text entry box.
    Is there a way to make validate user input accept any answer that is typed in the box, but still have the answers reported with my quiz?
    Thanks
    Heather

  • How to save multiple new entries in one shot?

    Hi,
    I am working on a pretty complex Create form. So apart from the standard form fields to allow user to enter the data, one of the sections in this form is a table which allows user to create multiple entries for this entity. And when hitting the "Save" button in this form, it will save all the data plus the multiple entries defined in this table.
    Is it possible to create multiple new entries in a table, and then save all of the new entries at the end? My experience so far is only create and save one new entry at a time.
    Any sample?
    Please advise.
    Thanks.
    -Mina

    Yes, I am using ADF BC.
    Let me explain more in details of the scenario:
    I have a table with "Create New" and "Save" button. The "Create New" button's ActionListener is set to "#{bindings.CreateInsert.execute}", and the "Save" button's ActionListener is set to "#{bindings.Commit.execute}".
    When the "Create New" button is hit, a new row shows up in the table to allow entering data inline. When the "Save" button is hit, it got committed. I would like to allow user to create multiple rows before committing. But currently, after I hit "Create New" button, then enter data, then hit "Create New" button again without committing, it gives error.
    Since this table is part of a form with other fields, I would like to save/commit it until everything in the form are completed, including creating multiple rows in the table.
    Any ideas how to achieve this?
    Any comments are appreciated.
    Thanks.
    -Mina

  • QoS: Multiple acl entries cannot be used in match-any in class Match_XY

    Hello All,
    I'm getting below error while trying to add the two extended ACL in the class-map for classifying the traffic. Is there any way I can add two extenteded ACL in the same class-map for classifying the traffic.
    Error log: "QoS: Multiple acl entries cannot be used in match-any in class Tag_AF13"
    device details: cisco WS-C6506-E with Supervisor Engine 2T
    IOS version -s2t54-adventerprisek9-mz.SPA.150-1.SY1.bin
    R1(config)#class-map match-any Tag_AF13
    #match access-group name XX
    #match access-group name XY
    QoS: Multiple acl entries cannot be used in match-any in class Tag_AF13
    Regards,
    Thiyagu

    Hi Rajan,
    Thats because of the logic used for ACl operations, as per your config you are class-map match-any. The match any argument says that the class map must match either of the two arguments supplied.So lets take a look at how the sequence of operations of how this will be interpreted by your class map.
    1> Any particular packet will be first matched against the first ACL "XX".
    2> Suppose there are 10 entries there if it matches any of those entries the appropriate action will be talen.
    3> If none of those entried match the packet there will be an implicit deny at the end of the ACL( default behaviour of ACL's)
    4> In that case the packet will match the implicit deny and will get dropped.
    5> The packet will under no circumstances go to the next ACL "XY"
    Thats the reason multiple ACL's aren't allowed by the IOS.
    You can try to collate both ACL's and put them in just one ACL that should work well. If you need help please pots both the ACL's.
    Please do let me know if you have any further questions
    HTH
    Regards
    Umesh

  • Converted XML not showing multiple data entries correctly

    Hello
    I am creating a PDF Form from a xsd scheme but when I have data that could require multiple entries the converted xml is a mess. I am curently trying to create a way to add fields for multiple children. I created an expanding table and the fields are automatically copied when I click on „+“ or are deleted when I click on „-“ . If I have multiple rows for children then the converted xml looks like this :
    The correct xml for multiple data entries should look like this (this is from a xml scheme not made in LiveCycle) :
    Even if I copy the fields without creating a table, the converted xml is still a mess just like on the first image. Is there a way to show the xml from the PDF from correctly. I linked the xsd scheme that I am using for the PDF form: https://drive.google.com/file/d/0B30LkLSwYgB4SFN5bTkyLW1fOVU/edit?usp=sharing
    Best regards
    Ivica

    Hello
    I am creating a PDF Form from a xsd scheme but when I have data that could require multiple entries the converted xml is a mess. I am curently trying to create a way to add fields for multiple children. I created an expanding table and the fields are automatically copied when I click on „+“ or are deleted when I click on „-“ . If I have multiple rows for children then the converted xml looks like this :
    The correct xml for multiple data entries should look like this (this is from a xml scheme not made in LiveCycle) :
    Even if I copy the fields without creating a table, the converted xml is still a mess just like on the first image. Is there a way to show the xml from the PDF from correctly. I linked the xsd scheme that I am using for the PDF form: https://drive.google.com/file/d/0B30LkLSwYgB4SFN5bTkyLW1fOVU/edit?usp=sharing
    Best regards
    Ivica

  • Multiple Service Entry Sheet For PO Line Items and One GR Document

    Dear All,
    We have just migrated from ECC 5.0 System to ECC 6.0 System. We are facing a problem while processing service entry sheets and the GR against them. The scenario is:
    1. We create a maintenance plan
    2. Upon saving the Maintenance Plan, a Purchase Requisition (PR) is generated
    3. The PR's are combined into one Purchase Order
    4. Against the Purchase Orders, multiple service entry sheets are created
    In ECC 5.0 System, we used to accept the service entry sheets and only one material document used to get generated as GR document. But now in ECC 6.0, we observe that with the same configuration, individual material documents are getting generated for individual service entry sheets. Is there a configuration in ECC 5.0, that enables clubbing of service entry sheet items in one GR document?
    Your help will be sincerely appreciated.
    Thanks and Sincere Regards,
    Amitabha

    Hi,
    If this can be of help I can report the list of the programs that                    
    are executed:                                                                               
    Before the popup "FUNCTION POPUP_TO_CONFIRM_STEP" appeares in ML81N,                          
    following programs are executed:                                                                               
    5  FUNCTION POPUP_TO_CONFIRM_STEP SAPLSPO1                                           
    4  FORM SELECTION_CHANGED_PO SAPLMLSR                                                
    3  FORM FCODE_SEL_PO SAPLMLSR                                                        
    2  FORM FCODE SAPLMLSR                                                               
    1  MODULE (PAI) FCODE SAPLMLSR                                                                               
    Unfortunately at this time it is not planned to change the current                   
    functionality.
    Regards,
    Edit

  • How to prevent multiple logins by using HttpBindingListener

    Hi,
    Can anyone tell me how do i actually use session to prevent multiple login from different machine? From my understanding, i need to use HttpBindingListener to valueBound and valueUnbound when user tries to login, but i encounter a problem is my session is always overwritten since i use setAttribute() method in servlet.
    For instance i use username(aaa & bbb) to login in two different machine, my login is always overwritten if i use username bbb to login after username aaa. i know it is because setAttribute() method overwrite existing session data, so i would like to know what other method should i use to achieve what i want, tks.

    Hi,
    This is the logic for session :
    Connect to db for verification, once verified, system return a UserBean and this UserBean will be set in ClientSecurityEngine
    When this particular user has been successfully verified, a new session will be created
    if(success)
        session = request.getSession();
        User user;
        synchronized(session)
        user = (User) session.getAttribute("user");                       
        if(user == null)
           user = new User(ClientSecurityEngine.getInstance().getUserBean().getUsername());
           session.setAttribute("user", user);
    /* User class */
    public class User implements HttpSessionBindingListener {
        private static Map<String, HttpSession> logins = Collections.synchronizedMap(new HashMap<String, HttpSession>());
        private String username;
        public User(String username) {
            this.username = username;       
        public String getUsername() {
            return username;
        @Override
        public void valueBound(HttpSessionBindingEvent event) {
            if (logins.containsKey(getUsername())) {
                HttpSession session = logins.remove(getUsername());
                if (session != null) {
                    session.invalidate();
                logins.put(getUsername(), event.getSession());
            } else {
                logins.put(getUsername(), event.getSession());
        @Override
        public void valueUnbound(HttpSessionBindingEvent event) {
            logins.remove(getUsername());
    }Edited by: EJP on 21/07/2011 14:22: added {noformat}{noformat} tags so we can actually read your code. Please use them.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

Maybe you are looking for