Comments on: The SQL Server default trace http://www.eraofdata.com/blog/the-sql-server-default-trace/ SQL Server posts that DBAs will (hopefully) find useful. Fri, 04 May 2012 18:56:39 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Ajmer Dhariwal http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-4106 Ajmer Dhariwal Wed, 21 Dec 2011 22:20:14 +0000 http://www.eraofdata.com/blog/?p=161#comment-4106 This was covered in the last query example (Query 5a: Isolating who made server configuration changes). Just run that and it will show you who did it, as long as it was in the trace file(s) you are interrogating. Thanks for asking the question as it higlighted some strange formatting in this post which I've tried to tidy up in order to make it clearer. This was covered in the last query example (Query 5a: Isolating who made server configuration changes). Just run that and it will show you who did it, as long as it was in the trace file(s) you are interrogating.
Thanks for asking the question as it higlighted some strange formatting in this post which I’ve tried to tidy up in order to make it clearer.

]]> By: Parvinder http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-4105 Parvinder Wed, 21 Dec 2011 12:34:53 +0000 http://www.eraofdata.com/blog/?p=161#comment-4105 Is there way to see who & when changed the SQL server configuration setting from default trace? setting Like max degree of parallelism, MIN/MAX Memory, Enable/Disable AWE..etc.. Thanks in advance. Is there way to see who & when changed the SQL server configuration setting from default trace?
setting Like max degree of parallelism, MIN/MAX Memory, Enable/Disable AWE..etc..

Thanks in advance.

]]> By: GT http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-3674 GT Wed, 05 Oct 2011 21:00:43 +0000 http://www.eraofdata.com/blog/?p=161#comment-3674 Excellent post. Thank you! Excellent post. Thank you!

]]> By: Ajmer Dhariwal http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-3453 Ajmer Dhariwal Wed, 31 Aug 2011 22:10:05 +0000 http://www.eraofdata.com/blog/?p=161#comment-3453 The default trace is deliberately designed to be too light-weight to delve into alterations to specific rows, so your best bet is create a specific trace filtered on the msdb database and the specific tables (msdb.dbo.sysjobhistory) concerned. Make sure it's capturing columns like clientprocessid, as well as hostname and loginname, nt_username, applicationname etc. Before you run the trace, right click on SQL Server Agent, go to Properties, and click on the History tab and review the settings there for history retention. The default trace is deliberately designed to be too light-weight to delve into alterations to specific rows, so your best bet is create a specific trace filtered on the msdb database and the specific tables (msdb.dbo.sysjobhistory) concerned. Make sure it’s capturing columns like clientprocessid, as well as hostname and loginname, nt_username, applicationname etc.
Before you run the trace, right click on SQL Server Agent, go to Properties, and click on the History tab and review the settings there for history retention.

]]> By: Matt http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-3452 Matt Wed, 31 Aug 2011 17:28:54 +0000 http://www.eraofdata.com/blog/?p=161#comment-3452 Is there a way to see who or what deleted data from a system table? I've got job history vanishing on one insstance and I've checked all the obvious settings - nothing should be deleting this data. I'd like to run a trace on the job history table and see what is removing the data. Is there a way to see who or what deleted data from a system table? I’ve got job history vanishing on one insstance and I’ve checked all the obvious settings – nothing should be deleting this data. I’d like to run a trace on the job history table and see what is removing the data.

]]> By: Bob http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-3226 Bob Tue, 24 May 2011 14:37:40 +0000 http://www.eraofdata.com/blog/?p=161#comment-3226 Here is a good set of reports for the Default Trace: http://sqlconcept.com/default-trace-audit-documentation-and-faq/ Here is a good set of reports for the Default Trace: http://sqlconcept.com/default-trace-audit-documentation-and-faq/

]]> By: Troubleshooting SQL Server login failures (18456 errors) http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-2660 Troubleshooting SQL Server login failures (18456 errors) Wed, 09 Feb 2011 19:40:25 +0000 http://www.eraofdata.com/blog/?p=161#comment-2660 [...] in an out-of-the-box installation) then you don’t need to start a new trace; check out my SQL Server default trace post [...] [...] in an out-of-the-box installation) then you don’t need to start a new trace; check out my SQL Server default trace post [...]

]]> By: Is there any way to see who deleted a view? http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-2466 Is there any way to see who deleted a view? Mon, 22 Nov 2010 07:24:08 +0000 http://www.eraofdata.com/blog/?p=161#comment-2466 [...] you are on SQL Server 2005 and above you can interrogate the default trace to see what [...] [...] you are on SQL Server 2005 and above you can interrogate the default trace to see what [...]

]]> By: Определение источника ошибки авторизации SQL Server (18456 ошибка) at Александр Горбач http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-2460 Определение источника ошибки авторизации SQL Server (18456 ошибка) at Александр Горбач Fri, 06 Aug 2010 05:04:00 +0000 http://www.eraofdata.com/blog/?p=161#comment-2460 [...] Если Вы используете SQL Server 2005 или выше т у Вас до сих пор включен трассировщик по умолчанию (который включен по умолчанию в установке из коробки), тогда вам не нужна начинать новую трассировку. Проверьте вместо этого мою запись The SQL Server default trace. [...] [...] Если Вы используете SQL Server 2005 или выше т у Вас до сих пор включен трассировщик по умолчанию (который включен по умолчанию в установке из коробки), тогда вам не нужна начинать новую трассировку. Проверьте вместо этого мою запись The SQL Server default trace. [...]

]]> By: califguy4christ http://www.eraofdata.com/blog/the-sql-server-default-trace/#comment-2442 califguy4christ Mon, 26 Oct 2009 20:34:34 +0000 http://www.eraofdata.com/blog/?p=161#comment-2442 Great post! Thanks for enumerating a few scenarios, too. Great post! Thanks for enumerating a few scenarios, too.

]]>