{"action":"created","issue":{"url":"https://api.github.com/repos/Azure/azure-powershell/issues/3047","repository_url":"https://api.github.com/repos/Azure/azure-powershell","labels_url":"https://api.github.com/repos/Azure/azure-powershell/issues/3047/labels{/name}","comments_url":"https://api.github.com/repos/Azure/azure-powershell/issues/3047/comments","events_url":"https://api.github.com/repos/Azure/azure-powershell/issues/3047/events","html_url":"https://github.com/Azure/azure-powershell/issues/3047","id":181319717,"number":3047,"title":"Set-AzureRmSqlDatabaseAuditingPolicy \"not working\"/\"no documentation\" for multiple event types","user":{"login":"Pradebban","id":13054214,"avatar_url":"https://avatars.githubusercontent.com/u/13054214?v=3","gravatar_id":"","url":"https://api.github.com/users/Pradebban","html_url":"https://github.com/Pradebban","followers_url":"https://api.github.com/users/Pradebban/followers","following_url":"https://api.github.com/users/Pradebban/following{/other_user}","gists_url":"https://api.github.com/users/Pradebban/gists{/gist_id}","starred_url":"https://api.github.com/users/Pradebban/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Pradebban/subscriptions","organizations_url":"https://api.github.com/users/Pradebban/orgs","repos_url":"https://api.github.com/users/Pradebban/repos","events_url":"https://api.github.com/users/Pradebban/events{/privacy}","received_events_url":"https://api.github.com/users/Pradebban/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-06T04:00:59Z","updated_at":"2016-10-06T23:46:37Z","closed_at":null,"body":"Cmdlet(s)\r\n\r\nSet-AzureRmSqlDatabaseAuditingPolicy\r\n\r\n###PowerShell Version\r\n4.0\r\n\r\n###Module Version\r\n2.0.1 (Azure)\r\n3.0.1 (AzureRM.Resources)\r\n\r\n###OS Version\r\n6.3.9600.17400\r\n\r\n### Description\r\n\r\nSet-AzureRmSqlDatabaseAuditingPolicy not working with multiple event types to audit the events\r\n\r\nThe below command, shows no error- however the table in the storage accounts logs only \"Login_Success\". \r\nEvent \"Login_Failure\" is not getting logged.\r\n\r\n**Official documentation:**\r\n\r\nhttps://msdn.microsoft.com/en-us/library/mt603531.aspx\r\n\r\n-EventType<String[]>\r\nSpecifies the event types to audit. The acceptable values for this parameter are:\r\n\r\n-- PlainSQL_Success\r\n-- PlainSQL_Failure\r\n-- ParameterizedSQL_Success\r\n-- ParameterizedSQL_Failure\r\n-- StoredProcedure_Success\r\n-- StoredProcedure_Failure\r\n-- Login_Success\r\n-- Login_Failure \r\n-- TransactionManagement_Success\r\n-- TransactionManagement_Failure\r\n-- All\r\n-- None\r\n\r\n**You can specify several event types.** You can specify All to audit all of the event types or None to specify that no events will be audited. If you specify All or None at the same time, the cmdlet does not run.\r\n\r\n### Script/Steps for Reproduction\r\n\r\n1. Run the command targetting the server and database\r\nSet-AzureRmSqlDatabaseAuditingPolicy -AuditType Table -EventType Login_Failure,Login_Success -StorageAccountName pradebban -StorageKeyType Primary -RetentionInDays 90 -ServerName hiddenserver -ResourceGroupName hiddenresourcegrp -Verbose -TableIdentifier pradebban -DatabaseName hiddendatabase\r\n\r\n2. Connect to the Table Storage and simulate login events ( both failure and success ) - only success would get logged.\r\n\r\nThanks,\r\nPradebban Raja\r\n"},"comment":{"url":"https://api.github.com/repos/Azure/azure-powershell/issues/comments/252119102","html_url":"https://github.com/Azure/azure-powershell/issues/3047#issuecomment-252119102","issue_url":"https://api.github.com/repos/Azure/azure-powershell/issues/3047","id":252119102,"user":{"login":"cormacpayne","id":4462409,"avatar_url":"https://avatars.githubusercontent.com/u/4462409?v=3","gravatar_id":"","url":"https://api.github.com/users/cormacpayne","html_url":"https://github.com/cormacpayne","followers_url":"https://api.github.com/users/cormacpayne/followers","following_url":"https://api.github.com/users/cormacpayne/following{/other_user}","gists_url":"https://api.github.com/users/cormacpayne/gists{/gist_id}","starred_url":"https://api.github.com/users/cormacpayne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cormacpayne/subscriptions","organizations_url":"https://api.github.com/users/cormacpayne/orgs","repos_url":"https://api.github.com/users/cormacpayne/repos","events_url":"https://api.github.com/users/cormacpayne/events{/privacy}","received_events_url":"https://api.github.com/users/cormacpayne/received_events","type":"User","site_admin":false},"created_at":"2016-10-06T23:46:37Z","updated_at":"2016-10-06T23:46:37Z","body":"@akromm Hey Adam, would you mind taking a look at this issue?"}}
{"actor":{"display_login":"cormacpayne"}}