Critical System Protection

Hi - I am using the Windows_Baseline_Detection  and Unix_Baseline_Detection policies on our servers.  Does anyone know if these policies generate events related to SQL  by default and if they do---where would I find SQL related events--- such as a failed login attempt. And if SQL events are not generated by default with the policy, where would I go to enable such activity to be monitored?  Thanks for any insight on this topic.

Symantec DCS has Windows Base detection Policy for monitoring the SQL events/logins/log off etc.

Thanks Pete.  I will check it out.