Discover Events Data Columns
The Security Audit event category has the following event classes:
Discover Begin class
Discover End class
The following tables list the data columns for each of these event classes.
Discover Begin Class—Data Columns
Data Column |
Description |
|---|---|
ConnectionID |
Contains the unique connection ID associated with the discover event. |
TextData |
Contains the text data associated with the discover event. |
ServerName |
Contains the name of the instance of Microsoft SQL Server Analysis Services on which the discover event occurred. |
CurrentTime |
Contains the current time of the discover event. |
DatabaseName |
Contains the name of the database in which the discover event occurred. |
NTCanonicalUserName |
Contains the Windows user name associated with the discover event. The user name is in canonical form. For example, engineering.microsoft.com/software/user. |
NTUserName |
Contains the Windows user name associated with the discover event. |
RequestProperties |
Contains the XML for Analysis (XMLA) request properties associated with the discover event. |
SPID |
Contains the server process ID (SPID) that uniquely identifies the user session associated with the discover event. The SPID directly corresponds to the session GUID used by XMLA. |
StartTime |
Contains the time (if available) at which the discover event started. |
NTDomainName |
Contains the Windows domain account associated with the discover event. |
SessionID |
Contains the session ID associated with the discover event. |
Discover End Class—Data Columns
Data Column |
Description |
|---|---|
ConnectionID |
Contains the unique connection ID associated with the discover event. |
TextData |
Contains the text data associated with the discover event. |
ServerName |
Contains the name of the instance of Analysis Services on which the discover event occurred. |
CurrentTime |
Contains the current time of the discover event. |
DatabaseName |
Contains the name of the database in which the discover event occurred. |
Duration |
Contains the approximate amount of time taken by the discover event. |
EndTime |
Contains the time at which the discover event ended. |
NTCanonicalUserName |
Contains the Windows user name associated with the object permission event. The user name is in canonical form. For example, engineering.microsoft.com/software/user. |
NTUserName |
Contains the Windows user name associated with the object permission event. |
SPID |
Contains the server process ID (SPID) that uniquely identifies the user session associated with the discover end event. The SPID directly corresponds to the session GUID used by XMLA. |
StartTime |
Contains the time (if available) at which the discover end event started. |
CPUTime |
Contains the amount of CPU time used by the discover event. |
Error |
Contains the error number of any error associated the discover event. |
Severity |
Contains the severity level of an exception associated the discover event. Values are: 0 = Success 1 = Informational 2 = Warning 3 = Error |
Success |
Contains the success or failure of the discover event. Values are: 0 = Failure 1 = Success |
NTDomainName |
Contains the Windows domain account associated with the discover event. |
SessionID |
Contains the session ID associated with the discover event. |