Only one water-quality database was audited; a new database was added later and nobody noticed. How do you ensure new databases inherit audit coverage?

Azure SQL auditing can be configured at the database and at the logical server or managed instance. Server-level auditing provides broader coverage so newly created databases are included without depending on per-database enablement alone. Sentinel analytics consume logs after collection; they do not replace enabling SQL auditing. Disabling auditing reduces visibility.