Monitoring Server Logins
Having looked at the session
configuration interface, now you’ll use it to deploy a session to
capture perhaps the simplest event data SQL Server can generate, login
information.
The important options for this session are highlighted with boxes in Figure 8. As you can see from the figure, we are configuring the login event to capture data from the client_app_name and client_hostname fields; not shown but selected as well is the nt_username global field.
Once the session has been created, you may need
to start it manually if you didn’t set it to auto-start. To do so,
right-click on the session and select Start Session.
After ensuring that the session is running,
that’s all you need to do to begin capturing the login information to
whichever target you configured. An example of the data captured to an
event file target and displayed in SSMS is shown in Figure 9.
