Default SQL Server Instance
To provide searching, alerting and reporting capabilities, Netwrix Auditor needs an SQL Server where audit data will be stored in the databases. To store data from the data sources included in the monitoring plan, the wizard creates an Audit Database for each plan. At this step, you should specify the default SQL Server instance that will host Netwrix Auditor databases. To read more, refer to SQL Server and Databases.
NOTE: Alternatively, you can instruct Netwrix Auditor not to store data to the databases but only to the repository (Long-Term Archive) – in this scenario, you will only be able to receive activity summaries. Reporting and alerting capabilities will not be provided.
Select one of the following options:
Disable security intelligence and make data available only in activity summaries — select this option if you do not want audit data to be written to the Audit Database. In this case, data will be available only in Activity Summary emails. Alerts, reports and search capabilities will not be supported.
NOTE: If you later clear this option to start saving data to the database, consider that already collected audit data will not be imported in that database.
Install a new instance of Microsoft SQL Server Express automatically — this option is available at the first run of the wizard. It allows you to deploy SQL Server 2016 SP2 Express with Advanced Services on the local machine. This SQL Server will be used as default host for Netwrix Auditor databases.
NOTE: It is strongly recommended that you plan for your databases first, as described in Database Sizing section. Remember that database size in SQL Server Express edition may be insufficient for your audited infrastructure.
Use an existing SQL Server instance — select this option to use an existing SQL Server instance.
NOTE: Local SQL Server instance is detected automatically, and input fields are pre-populated with its settings.
Complete the following fields:
SQL Server instance
Specify the name of the SQL Server instance to store audit data.
NOTE: If you have more than one Netwrix Auditor Server running in your network, make sure to configure them to use different SQL Server instances. The same SQL Server instance cannot be used to store audit data collected by several Netwrix Auditor Servers.
Select the authentication type you want to use to connect to the SQL Server instance:
- Windows authentication
- SQL Server authentication
Specify the account to be used to connect to the SQL Server instance.
NOTE: This account must be granted the database owner (db_owner) role and the dbcreator server role.
See Configure Audit Database Account for more information.
Enter a password.