Security Audit Event Category

The Security Audit event category has the event classes described in the following table.

Event Class	Event Id	Description
Audit Login	1	Records all new connection events since the trace started, such as when a client requested a connection to a server running an instance of Analysis Services.
Audit Logout	2	Records all new disconnect events since the trace started, such as when a client issues a disconnect command.
Audit Server Starts and Stops	4	Records shutdown, start, and pause activities for services.
Audit Object Permission Event	18	Records all object permission changes.
Audit Admin Operations Event	19	Records server operations for backup, restore, synchronize, attach, detach, image load, and image save.

For information about the columns associated with each of the Security Audit event classes, see Security Audit Data Columns.