Skip to content

Commit de1553a

Browse files
Update auditing-overview.md (#34542)
1 parent 775d70c commit de1553a

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

azure-sql/database/auditing-overview.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,8 @@ You can use SQL Database auditing to:
6969
- **Hierarchical namespace** for all types of **standard storage account** and **premium storage account with BlockBlobStorage** is supported.
7070
- Audit logs are written to **Append Blobs** in an Azure Blob Storage on your Azure subscription
7171
- Audit logs are in .xel format and can be opened with [SQL Server Management Studio (SSMS)](/sql/ssms/download-sql-server-management-studio-ssms).
72-
- To configure an immutable log store for the server or database-level audit events, follow the [instructions provided by Azure Storage](/azure/storage/blobs/immutable-time-based-retention-policy-overview#allow-protected-append-blobs-writes). Make sure you have selected **Allow additional appends** when you configure the immutable blob storage.
72+
- To configure an immutable log store for the server or database-level audit events, follow the [instructions provided by Azure Storage](/azure/storage/blobs/immutable-time-based-retention-policy-overview#allow-protected-append-blobs-writes). When configuring immutable blob storage for auditing, ensure that **Allow protected append writes** is set to either **Append blobs** or **Block and append blobs**. The **None** option isn't supported. For time-based retention policies, the storage account's retention interval must be shorter than the SQL Auditing retention setting. Configurations where the storage policy is set, but SQL Auditing retention is `0`, aren't supported.
73+
7374
- You can write audit logs to an Azure Storage account behind a virtual network or firewall.
7475
- For details about the log format, hierarchy of the storage folder, and naming conventions, see the article, [SQL Database audit log format](audit-log-format.md).
7576
- Auditing on [Use read-only replicas to offload read-only query workloads](read-scale-out.md) is automatically enabled. For more information about the hierarchy of the storage folders, naming conventions, and log format, see the article, [SQL Database audit log format](audit-log-format.md).

0 commit comments

Comments
 (0)