SELECT distinct server_principal_name,object_name,event_time
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
union all
SELECT distinct server_principal_name,object_name,event_time
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
union all
SELECT distinct server_principal_name,object_name,event_time
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
把查询出来的 server_principal_name,object_name,event_time三个字段的结果拼接起来。
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
union all
SELECT distinct server_principal_name,object_name,event_time
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
union all
SELECT distinct server_principal_name,object_name,event_time
FROM sys.fn_get_audit_file('\\10.0.0.100\Ad\Audit_DDL_678FA9A7-018F-4280-97C7-FD1861CAB760.sqlaudit ', NULL, NULL)
WHERE database_name = 'HR'and action_id='CR' and class_type='U'
把查询出来的 server_principal_name,object_name,event_time三个字段的结果拼接起来。
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/22996654/viewspace-2146329/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/22996654/viewspace-2146329/