Microsoft KB Archive/307538

= FIX: SQLTrace Start and Stop is Now Reported in Windows NT Event Log for SQL Server 2000 =

Article ID: 307538

Article Last Modified on 9/26/2005

-

APPLIES TO


 * Microsoft SQL Server 2000 Standard Edition

-



This article was previously published under Q307538



BUG #: 355405 (SHILOH_BUGS)



SYMPTOMS
In Microsoft SQL Server 7.0 when you start, stop or pause a SQLTrace, SQL Server 7.0 writes an entry that corresponds to one of these events to the Microsoft Windows NT event log. SQL Server 2000 does not implement the same auditing feature.



RESOLUTION
To resolve this problem, obtain the latest service pack for Microsoft SQL Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

290211 INF: How to Obtain the Latest SQL Server 2000 Service Pack

Hotfix
NOTE: The following hotfix was created prior to Microsoft SQL Server 2000 Service Pack 2.

The English version of this fix should have the following file attributes or later:   Version      File name        Platform --

8.00.443    Sqlservr.exe     i386 8.00.443    Sqlevn70.rll     i386 NOTE: Due to file dependencies, the most recent hotfix or feature that contains the preceding files may also contain additional files.



STATUS
Microsoft has confirmed this to be a problem in SQL Server 2000. This problem was first corrected in Microsoft SQL Server 2000 Service Pack 2.



MORE INFORMATION
With this fix, SQL Server 2000 now records entries to the Windows NT event log if the following situations occur associated with a SQLTrace:


 * A user explicitly starts a SQLTrace.


 * A user explicitly stops a SQLTrace.


 * SQL Server stops a SQLTrace due to a standard SQL Server service shutdown.

SQL Server 7.0 also records a Windows NT event log entry when a SQLTrace is paused; however, that functionality does not exist with SQLTrace in SQL Server 2000. The SQL Profiler tool in SQL Server 2000 provides a Pause button, but the Pause button just stops and starts an existing SQLTrace without clearing the existing SQL Profiler window.

Each Windows NT event log entry created for these events is an &quot;Information&quot; type entry that is uniquely identified by information in the Description field. The Description field contains an ID, text that describes that ID, the Trace ID, and the LoginName of the user associated with the event.

The possible values for ID and the corresponding text are listed here:


 * 19030 - SQL Trace started.


 * 19031 - SQL Trace stopped.


 * 19032 - SQL Trace stopped due to a server shutdown.

Here is an example Description field for a SQLTrace start Windows NT event log entry: 19030 : SQL Trace started. Trace ID = '1' Login Name = 'MYDOMAIN\myadmin' This feature is implemented within SQL Server so that it covers any execution of the sp_trace_setstatus stored procedure, which is used by the SQL Profiler tool to start and stop a SQLTrace.

Keywords: kbbug kbfix kbqfe kbsqlserv2000presp2fix kbhotfixserver KB307538

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.