This quick start guide will help Accenture Security customers configure Microsoft® SQL Trace to allow log collection from the Log Collection Platform (LCP).
The document includes the following topics:
A list of supported versions is available in the Accenture Security Supported Products List document (Accenture_MSS_Supported_Products_List.xlsx) which can be found at
Accenture Portal - https://mss.accenture.com/PortalNextGen/Reports/Documents
Microsoft SQL Trace Server
Default database port
To configure SQL Trace, follow the steps below.
To create a new trace, refer to the link: http://technet.microsoft.com/en-us/library/ms188662.aspx
Create the set of events that should be logged in to this trace.
Configure every event for the fields that should be included. Accenture Security recommends you to include the following fields which are required in every event type.
Creating a read-only database user account for Microsoft SQL Server from command line (CLI)
From the Windows Start menu, choose Run, and then type the following command:
Navigate to the directory that contains the
For Microsoft SQL Server 2012, the default directory location for this file is C:\Program Files\Microsoft SQL Server\110\Tools\Binn.
For Microsoft SQL Server 2008, the default directory location for this file is C:\Program Files\Microsoft SQL Server\100\Tools\Binn.
For Microsoft SQL Server 2005, the default directory location for this file is C:\Program Files\Microsoft SQL Server\90\Tools\Binn.
sqlcmd -S ip_address_or_host_name -U sa -P sa_user_password
For Microsoft SQL Server 2005, Microsoft SQL Server 2008, and Microsoft SQL Server 2012:
EXEC sp_addlogin '<account_name>', '<password>', '<database_name>'
CREATE LOGIN '<account_name>' WITH PASSWORD = '<password>' USE <database_name>
CREATE USER <account_name> FOR LOGIN <account_name>
GRANT CONNECT TO '<account_name>';
GRANT ALTER TRACE TO '<account_name>';
To set the SQL Server security mode to mixed authentication, follow the steps below.
Note: If you use a Microsoft SQL Server database, you must make sure that the database security mode is set to mixed authentication. The security mode is selected when the SQL Server is installed. You can change the security mode any time.
Based on the Microsoft SQL Server version, do one of the following:
For Microsoft SQL Server 2012, from the Start menu, click Programs > Microsoft SQL Server 2012 > SQL Server Management Studio.
For Microsoft SQL Server 2008, from the Start menu, click Programs > Microsoft SQL Server 2008 > SQL Server Management Studio.
For Microsoft SQL Server 2005, from the Start menu, click Programs > Microsoft SQL Server 2005 > SQL Server Management Studio.
For Microsoft SQL Server 2000, from the Start menu, click Programs > Microsoft SQL Server 2000 > SQL Enterprise Manager.
Login as an Administrator.
On the left pane, right-click the appropriate server and then click Properties.
In the Server Properties window, select Security.
In Server Authentication section, click SQL Server and Windows Authentication mode.
Click OK and then click Close.
To configure the Microsoft SQL Server instance to listen on a non-dynamic port, follow the steps below.
On the Start menu, go to Programs > Microsoft SQL Server > SQL Enterprise Manager > SQL Server Configuration Manager.
Expand SQL Server Network Configuration and select Protocols for .
In the right pane, click TCP/IP.
In the TCP/IP properties window, on the IP Address tab, ensure that the Active and Enabled options are set to Yes.
Ensure that the TCP Dynamic Ports text box is blank for the IP address to which the LCP connects.
In the TCP Port text box, type 1433
To configure an SSL connection for the Microsoft SQL server, follow the steps below.
Based on the Microsoft SQL server version, do one of the following:
For Microsoft SQL Server 2012, from the Start menu, click Programs > Microsoft SQL Server 2012 > Configuration Tools > SQL Server Configuration.
For Microsoft SQL Server 2008, from the Start menu, click Programs > Microsoft SQL Server 2008 > Configuration Tools > SQL Server Configuration.
For Microsoft SQL Server 2005, from the Start menu, click Programs > Microsoft SQL Server 2005 > Configuration Tools > SQL Server Configuration.
For Microsoft SQL Server 2000, from the Start menu, click Programs > Microsoft SQL Server 2000 > Configuration Tools > SQL Server Configuration.
Expand SQL Server Network Configuration, right-click Protocols for the required server and then click Properties.
On the Certificate tab, select the required certificate.
Note: Self-signed certificates are supported but not recommended because they do not provide adequate security.
On the Flags tab, specify the protocol encryption option.
Set the ForceEncryption option to Yes to encrypt all client and server communication.
Click Apply and then click OK.
Click SQL Server Services, right-click SQL-SERVER, and then click Restart.
Click Apply and then click OK.
Note: Customer DB Administrator approval is required to restart the SQL server.
The database URL string that needs to be configured on the collector by MSS.
Note: If the database is configured to use a different port number, please advise the Accenture Security MSS onboarding team.
The username for the database account mentioned in the Pre-Installation Questionnaire (PIQ).
The password for the database account mentioned in the PIQ.
Copyright © 2020 Accenture. All rights reserved.
Accenture, the Accenture Logo, and DeepSight Intelligence are trademarks or registered trademarks of Accenture in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Accenture and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. ACCENTURE SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and Commercial Computer Software Documentation," as applicable, and any successor regulations, whether delivered by Accenture as on premises or hosted services. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.