Enquriy on SQL monitoring

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

We created a service account for SQL database monitoring, using sqlserver probe.

The security team detected this monitoring service account is having interactive login behavior (windows security event logon type:2) on D:\Program Files\Nimsoft\probes\database\sqlserver\sqlserver_monitor.exe

Please confirm whether the monitoring is being conducted through interactive logon for the intended purposes.

 

Environment

• Release: 20.4

Resolution

•  If it is Windows authentication, then the probe will monitor with interactive logon as we are providing the windows credentials.