1 of 1 people found this helpful
The biggest question here is "Will you be running the Solarwinds LEM MSSQL Auditor or not? If yes, where will it be running?" MSSQL Auditor runs a trace against the database, and can pull in security events from within SQL, but that comes at a cost to database performance (every write, query, etc is going to incur a write to the audit logs). If you decide it's worth it, will you run MSSQL Auditor on every box or on one central box and query all databases from there?
In my lab, I have three SQL servers, and this is the profile for all three of them. They're different Windows and SQL versions, but this setup works on all of them, and this should cover all your listed SQL servers.
I have one box that runs MSSQL Auditor, and on that box, I have the following connectors configured, and really the only important one (for this scenario) is the first one to read the MSSQL Auditor:
Now, your Oracle box is going to be in it's own profile. The SQL stuff won't work for Oracle, but I have an Oracle server and my connectors look like this:
Again, only the top one is specific to Oracle.