Search for a specific audited file Caution: Because the File Data column of the audit_FileStorage table contains all the binary contents of files, avoid referencing this column in SQL queries. Search IMs for a String Using SearchIMs The following procedure searches the audit database for all instances of audited Groove instant message traffic (sent and received) that contain a specified string. To create and invoke a procedure that searches audited Groove IMs for a string, follow these steps: Create a stored procedure, entitled SearchIMs, using the following model: CREATE PROCEDURE [dbo].[SearchIMs] @keyword nvarchar(32) = NULL AS BEGIN declare @LikeExpression nvarchar(34) set @LikeExpression = '%' + @keyword + '%' SET NOCOUNT ON; SELECT audit_LogEntryProperties.attr_datetime AS [Date / Time], audit_LogEntryProperties.attr_identity_name AS Person, audit_EventTypeReadableNames.ReadableName AS Action, audit_AttributeReadableNames.ReadableValue AS AttributeName, audit_LogEntryAttributes.attrib_value AS AttributeValue FROM audit_LogEntryProperties INNER JOIN
Search for a specific audited file Caution: Because the File Data column of the audit_FileStorage table contains all the binary contents of files, avoid referencing this column in SQL queries. Search IMs for a String Using SearchIMs The following procedure searches the audit database for all instances of audited Groove instant message traffic (sent and received) that contain a specified string. To create and invoke a procedure that searches audited Groove IMs for a string, follow these steps: Create a stored procedure, entitled SearchIMs, using the following model: CREATE PROCEDURE [dbo].[SearchIMs] @keyword nvarchar(32) = NULL AS BEGIN declare @LikeExpression nvarchar(34) set @LikeExpression = '%' + @keyword + '%' SET NOCOUNT ON; SELECT audit_LogEntryProperties.attr_datetime AS [Date / Time], audit_LogEntryProperties.attr_identity_name AS Person, audit_EventTypeReadableNames.ReadableName AS Action, audit_AttributeReadableNames.ReadableValue AS AttributeName, audit_LogEntryAttributes.attrib_value AS AttributeValue FROM audit_LogEntryProperties INNER JOIN
GrooveAuditPrescriptiveGuide.docx