Microsoft SQL Server preparation for communication with QRadar

To prepare Microsoft SQL Server for communication with QRadar, you must create an audit object, audit specification, and database view.

Creating a Microsoft SQL Server auditing object
Create an auditing object to store audit events.
Creating a Microsoft SQL Server audit specification
Create an audit specification to define the level of auditing events that are written to an audit file.
Creating a Microsoft SQL Server database view
Create the dbo.AuditData database view to allow QRadar to poll for audit events from a database table by using the JDBC protocol. The database view contains the audit events from your server audit specification and database audit specification.

Parent topic: Microsoft SQL Server