| A community of more than 1,600,000 database professionals and growing |
| | Good Security Needs Layers How many of you have wanted to know who started or stopped a SQL instance? Probably a few of you, as disruption to the service can affect customers. Most of us are concerned with the changes made inside SQL Server to objects and data, and that's what the auditing features inside SQL Server are watching. The problem is that the database platform is dependent on the host OS, and as such, some actions take place at that level. Auditing inside SQL Server isn't setup to capture this information. Should you care? Well, restarts, or the stopping or a service are one way that a malicious actor could alter files, change the error log without you realizing it, or even copy files to other systems. All these actions might be outside of any auditing or event tracing you've set up. Good security needs multiple layers because the system you need to protect is often dependent on some other part of our infrastructure. Databases depend on the host OS and perhaps directory services. Your OS may depend on a hypervisor, and certainly needs patching, so it depends on human administrators. Many of our systems depend on networking and firewall configurations. There are other layers, but the more that we can ensure each layer is secure, the better off we are. Certainly our systems always depend on humans not giving away credentials or installing malware, but that is often something many of us can't control. I ran across an article that explains how to use auditing at the Windows level to track this down, and ensure that there aren't more unexplained restarts. You can implement this, but if you don't have Windows administrative privileges, you'll need to get help from someone that does. Likely a couple of you have been glad that there isn't a great way to audit this from the OS, as you were the one performing a restart without permission. If that's your MO, I expect you might not want to pass this piece along to your security staff or auditors. If that's the way you work, though, I would advise you to change your habits. Steve Jones from SQLServerCentral.comJoin the debate, and respond to today's editorial on the forums |
| The Voice of the DBA Podcast Listen to the MP3 Audio ( 3.2MB) podcast or subscribe to the feed at iTunes and Libsyn. The Voice of the DBA podcast features music by Everyday Jones. No relation, but I stumbled on to them and really like the music. | |
|
|
| ADVERTISEMENT | | The industry standard for comparing and deploying SQL Server database schemas Trusted by 71% of Fortune 100 companies, SQL Compare is the fastest way to compare changes, and create and deploy error-free scripts in minutes. Plus you can easily find and fix errors caused by database differences. Download your free trial |
| | Database DevOps Demo Webinar Learn how to automate your database deployments alongside your app code in this free demo webinar. Register now |
|
|
|
| | | Hugo Kornelis from SQLServerCentral.com Earlier levels have shown how Columnstore Indexes work effectively with static data. In most tables however, data is hardly ever static. We are constantly inserting new rows, and updating or deleting existing rows. If you think about what this means for a columnstore index, you will realize that this comes with some unique challenges. More » |
| Press Release from Redgate Every day, out in the various online forums devoted to SQL Server, and on Twitter, the same types of questions come up repeatedly: Why is this query running slowly? Why is SQL Server ignoring my index? Why does this query run quickly sometimes and slowly at others? My response is the same in each case: have you looked at the execution plan? More » |
| Rob Sewell from SQLServerCentral Blogs It’s been 45 days since we released dbachecks Announcing dbachecks – Configurable PowerShell Validation For Your SQL Instances https://t.co/2dmUdKtgTQpic.twitter.com/N8W01KaKo9 — Rob Sewell (@sqldbawithbeard) February... More » |
| Solomon Rutzky from SQLServerCentral Blogs (last updated: 2018-04-11) Today we are going to take a look into an area that you probably are thinking has very... More » |
|
|
| | Today's Question (by Steve Jones): I've loaded a flat file into an R dataframe. The source data looks like this: GameDate Visitor Home VisitorScore HomeScore 20180315 Oklahoma URI 78 53 20180315 WrightState Tennessee 47 73 Once loaded, I find that I get this result: > class(ncaa.2018$GameDate) [1] "integer" How can I change the GameDate column to a date in a new dataframe? |
Think you know the answer? Click here, and find out if you are right. We keep track of your score to give you bragging rights against your peers. This question is worth 1 point in this category: R Language. We'd love to give you credit for your own question and answer. To submit a QOTD, simply log in to the Contribution Center. |
|
|
| |
ADVERTISEMENT | The company's new IT initiative, code named Phoenix Project, is critical to the future of Parts Unlimited, but the project is massively over budget and very late. The CEO wants Bill to report directly to him and fix the mess in ninety days or else Bill's entire department will be outsourced. Get your copy from Amazon today. | | |
|
|
|
|
|
| Yesterday's Question of the Day |
| Yesterday's Question (by Steve Jones): The setup files for SQL Server are shared across instances on the same host how? Answer: Across minor versions Explanation: The setup files are shared across minor versions of SQL Server. Ref: Work with Multiple Versions and Instances of SQL Server - click here » Discuss this question and answer on the forums |
|
|
| | Wes Henriksen from SQLServerCentral.com Generate a temp table using Select * INTO #[table]. Once the temp table has been created, execute this statement within the same session (tab in SSMS). The output will have a row per line definition of the table, in column order, that can be used to explicitly declare the temp table. I've used this in the past when I wanted to generate a temp table manually but do not want to type up the statements, or don't know what the final data types will be. With this, I can simply identify the data I need, insert it using INTO #temp, and then execute this to generate the create statement I need. I wrote this a few years ago so I'm sure someone can improve on it, but figured it was worth sharing anyway. It may not work for all column data types as I've only included the ones I've needed so far. More » |
|
|
| Database Pros Who Need Your Help |
| Here's a few of the new posts today on the forums. To see more, visit the forums. Migration of DB from server to server - Hi All, I have recently come across a new error with little info about why this is happening. I am currently... Migration from SQL 2008 to 2017 - Hi All, I need some assistance in the process of migrating from 2008 to 2017. This is the first time doing... Remove cursor to get the same output - Hi all. need some help to remove CURSOR from the following code to get the same result. Will highly appreciate! ... Error Processing Cube from SSIS package run as a SQL Job - Hi, I am trying to upgrade a SQL server with Analysis Services to SQL 2017 cu5, 14.0.3023.8, (I tried CU4 before... Removing stored procedures to move to cloud - I got an interesting email today about cutting back on the reliance of the applications on databases and plans to... PowerBI and Automation testing - Dear Forum members, I write because I was searching on the internet about two topics that I need to step into. PowerBI... PUBLIC server role vs PUBLIC database role - Dear Everyone I am conducting a database cleanup exercise to remove all unnecessary privileges from the PUBLIC role per the... SQL Server services and domain accounts / permissions - Dear Everyone i hope you are doing great I am going to ask a topic which has probably been asked... Shrinking Transnational Log File - Hi All, I have posted similar question here 7 or 8 years ago. Now I am unable to find that post.... SQL Server Management Studio setup failed - Hi everybody , I installed SQL server 2016 but SSMS doesn't installed show me this error sql server managment studio setup... SSIS : How to pass the value of two arrays into a variable - Dear All, I have a code (script task inside SSIS) that reads a csv file and gets only the necessary columns and recods... Get all index definitions from all databases and all tables - Hi all I need to get all the indexes from all tables in all databases including:- Database name Table name Index name Index Columns Included columns I've... Extended event not capturing queries - How to optimiz this slect statement please - Hello Good Morning, How to optimize this code please advise.... SELECT What permissions do you need to run jobs via SQL Agent? - I've googled my issue all weekend, but can't seem to solve the problem So basically, I have a query, when I... last entry, first entry - Hello I want to prepare a stock list of last entry , first entry DECLARE @IN TABLE (STOCK INT,ID INT, DATE_ DATETIME,AMOUNT... String size causing error - I get the following error with the following code. This code is stripped from a larger piece of code to... I need to "group" two rows of data, but cannot seem to figure it out - my table is simple it has 1,000's of rows. one row is the account balance in USD, and the other row (and they are... Execution plan missing. - Hi all. Recently I have found with the help of one of the Bent Ozar, scritps. One called spBlitzCache. And found some... The SQL Saturday Thread - As popular as SQL Saturday is, I'm surprised that nobody created a thread dedicated to SQL Saturday, so I created... |
|
| This email has been sent to [email protected]. To be removed from this list, please click here. If you have any problems leaving the list, please contact the [email protected]. | This newsletter was sent to you because you signed up at SQLServerCentral.com. Feel free to forward this to any colleagues that you think might be interested. If you have received this email from a colleague, you can register to receive it here. | This transmission is ©2018 Redgate Software Ltd, Newnham House, Cambridge Business Park, Cambridge, CB4 0WZ, United Kingdom. All rights reserved. Contact: [email protected] |
|
|