Agent

The 8 checks in the “Agent” category of a SQL Server audit: what each one verifies, its severity and the versions covered.

Checks in this category

AGENT001
Agent Running
Critical
SQL Server Agent must be running
Versions : 2012-2025
AGENT002
Failed Jobs
High
Recurring failed jobs indicate a problem
Versions : 2012-2025
AGENT004
Operators Configured
High
At least one operator should be configured for alerts
Versions : 2012-2025
AGENT005
Severity 19-25 Alerts
High
Alerts for critical errors should be configured
Versions : 2012-2025
AGENT008
Corruption Alerts
High
Alerts for errors 823, 824, 825 should exist
Versions : 2012-2025
AGENT003
Jobs Without Notification
Medium
Jobs should notify on failure
Versions : 2012-2025
AGENT006
Failsafe Operator
Medium
A failsafe operator should be configured
Versions : 2012-2025
AGENT007
Jobs owned by named accounts
Medium
Counts the SQL Server Agent jobs whose owner is not the built-in administrator account "sa". A login that owns a job can no longer be dropped (error 15170), and the T-SQL steps of a job run with the rights of its owner as long as that owner is not a sysadmin.
Versions : 2012-2025