Monitoring Database Drift (Unauthorized Changes to Database Objects)

Install metric...

Metrics install automatically if you have SQL Monitor installed.

If you are using Redgate’s SQL Server monitoring tool, SQL Monitor, you can instantly install and run this metric on your servers.

Reports the number database object changes (create, alter or drop) in last 30 mins.

First, create the following Extended Event session on the monitored SQL Server instance:

Metric definition

Name

ObjectsChanged

Description

Reports the number database object changes (create, alter or drop) in last 30 mins.

The T-SQL query that will collect data

Instances to collect from

Default

Databases to collect from

master

Collection frequency

1 min

Use collected or calculated values

Leave the Use a calculated rate of change between collections check box unchecked

Metric collection

Enabled

Alert definition

Alert name

Database Drift has occurred

Description

Someone made unauthorized changes to database objects..

Raise an alert when the metric value goes

Above the defined threshholds

Default threshold values

High:1
Medium:
Low:

Raise an alert when the threshold is passed for

collections

Alert is

Enabled