I'm trying to configure sql servers to send logs into RSA. Please can anyone share the experience which is the best recommanded way to do it ? The documents are just a bit confusing to me: File (ERRORLOG), Windows Eventing (MS SQL Ser-vice Logs and SQL Auditing) or ODBC (SQL Auditing) ? Based on some resources SQL Server Audit Logging they suggest to do the File mode.
Also I'm having problems doing the configuration for File mode. What is File Directory ?