Quick Start Checklist

Follow these steps in order to go from a new Azure Marketplace subscription to live SQL audit data in your portal.

Estimated time: 30–60 minutes (most of this is SQL Server configuration on your end)

---

☁️ Account setup

• [ ] Subscribe to kAudit on Azure Marketplace
• [ ] Activate your subscription at portal.kovoco.net/marketplace/activate
• [ ] Accept the invitation email and create your portal account
• [ ] Sign in to portal.kovoco.net

---

🏢 Organization setup

• [ ] Confirm your organization name is set correctly — Org Settings
• [ ] Note your Tenant ID from the Org Settings page — you'll need it for the agent
• [ ] Create an Agent API Key — Tenant Agents

Save these for the agent installer

You'll need the Central API URL (https://api.kovoco.net) and the Agent API Key you just created when you run the MSI installer.

---

🗃️ SQL Server configuration

• [ ] Verify that SQL Server Audit is enabled on your SQL Server — Enable SQL Server Audit
• [ ] Confirm .sqlaudit files are being written to a local folder — Configure Audit Files
• [ ] Run the validation query to confirm audit events are flowing:

SELECT TOP 5
    event_time,
    action_id,
    database_name,
    statement
FROM sys.fn_get_audit_file('C:\Audit\*.sqlaudit', DEFAULT, DEFAULT)
ORDER BY event_time DESC;

If this returns rows, SQL Server audit is working. If not, follow the SQL Server Audit setup guide before continuing.

• [ ] Note the full path to the .sqlaudit files (e.g., C:\Audit\) — you need this for the agent

---

🖥️ Agent installation

• [ ] Download the latest MSI from the GitHub Releases page — Download the Agent
• [ ] Save the MSI to a local path on the SQL Server host (e.g., C:\Temp\kaudit\)
• [ ] Install the agent — Install the Agent
• [ ] Set the Tenant ID in the agent config file (required in v1.0.x) — Configure the Agent
• [ ] Restart the kAuditEventHubPublisher Windows service

---

✅ Verify everything is working

• [ ] Open Services (services.msc) and confirm kAuditEventHubPublisher is Running
• [ ] Sign in to portal.kovoco.net
• [ ] Navigate to Audit Activity — you should see events flowing within 1–2 minutes
• [ ] Check the agent heartbeat card (bottom-left of the portal) shows a recent check-in

Not seeing any events?

Generate some SQL activity (run a few SELECT statements against your monitored database) and wait 1–2 minutes. If nothing appears after 5 minutes, check the agent configuration guide or the Windows Event Log on the agent host for errors.

---

👥 Optional next steps

Once you're up and running:

• Invite your team — Add colleagues with appropriate roles
• Manage your API keys — Create keys for programmatic access