I have a problem with a MSSQL 2008 Event Source configured to audit to Windows Event Logs.
I have follow the official guide (Microsoft SQL Server Event Source Configuration Guide ) and just for the test I'm trying to audit failed and succesful logins on Server Audit Specifications and selects on Database Audit Specifications.
I see on the Application Log that the events are being recorded correctly (with event id 33205). For example a SELECT:
But the problems is when I get the event through the Log Collector. It shows the event like this:
It doesn't show any event data and it isn't recognized as mssql.
Hope someone can give me a hint.