I followed the instructions for the Azure SQL MI add-on but there are no instructions on how to run a report to view the imported logs - the screenshot in the article was not much help. How can I test to ensure Netwrix is importing the logs successfully? I am on Netwrix Auditor 10.7.
Hi Jonathan,
Thank you very much for your message and for your interest in the Azure SQL MI add-on!
If everything were working correctly, you would see logon events under the Datasource: Netwrix API in Netwrix Auditor. However, since the situation appears to be different at the moment, I recommend checking the following folder on the machine where the add-on is installed:
C:\ProgramData\Netwrix Auditor Add-on for Azure SQL MI\TraceLog
here you should find trace logs that may contain an error message returned from Microsoft SQL, which can help identify the issue.
In any case, I also recommend installing the latest version of the add-on from this link:
https://releases.netwrix.com/products/auditor/10.8/auditor-azure-sql-mi-addon-1.0.33.zip
https://releases.netwrix.com/products/auditor/10.8/auditor-azure-sql-mi-addon-1.0.33.zip.sha256.txt
as it includes several important fixes and improvements.
Thank you in advance,
Evgenii
2 Likes
Thanks. Will this also work with Auditor 10.7?
Yes, it is not dependent on the Auditor version. The main requirement for Netwrix Auditor is that the API endpoint is accessible.