Capture logon trigger event data

Applies to: SQL Server Azure SQL Managed Instance

To capture XML data about LOGON events for use inside logon triggers, use the EVENTDATA function. The LOGON event returns the following event data schema:

<EVENT_INSTANCE>
   <EventType>event_type</EventType>
   <PostTime>post_time</PostTime>
   <SPID>spid</SPID>
   <ServerName>server_name</ServerName>
   <LoginName>login_name</LoginName>
   <LoginType>login_type</LoginType>
   <SID>sid</SID>
   <ClientHost>client_host</ClientHost>
   <IsPooled>is_pooled</IsPooled>
</EVENT_INSTANCE>

Contains LOGON.

Contains the time when a session requests to be established.

The type of login, such as SQL Server login, Windows account, certificate, server role, or Microsoft Entra ID.

Contains the base 64-encoded binary stream of the security identification number (SID) for the specified login name.

Contains the host name of the client from where the connection is made. The value is <local_machine> if the client and server name are the same. Otherwise, the value is the IP address of the client.

1 if the connection is reused by using connection pooling. Otherwise, the value is 0.