Article ID: 307538
Article Last Modified on 9/26/2005
APPLIES TO
- Microsoft SQL Server 2000 Standard Edition
This article was previously published under Q307538
BUG #: 355405 (SHILOH_BUGS)
SYMPTOMS
In Microsoft SQL Server 7.0 when you start, stop or pause a SQLTrace, SQL Server 7.0 writes an entry that corresponds to one of these events to the Microsoft Windows NT event log. SQL Server 2000 does not implement the same auditing feature.
RESOLUTION
To resolve this problem, obtain the latest service pack for Microsoft SQL Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
290211 INF: How to Obtain the Latest SQL Server 2000 Service Pack
Hotfix
NOTE: The following hotfix was created prior to Microsoft SQL Server 2000 Service Pack 2.
The English version of this fix should have the following file attributes or later:
Version File name Platform
--------------------------------------
8.00.443 Sqlservr.exe i386
8.00.443 Sqlevn70.rll i386
NOTE: Due to file dependencies, the most recent hotfix or feature that contains the preceding files may also contain additional files.
STATUS
Microsoft has confirmed this to be a problem in SQL Server 2000. This problem was first corrected in Microsoft SQL Server 2000 Service Pack 2.
MORE INFORMATION
With this fix, SQL Server 2000 now records entries to the Windows NT event log if the following situations occur associated with a SQLTrace:
- A user explicitly starts a SQLTrace.
- A user explicitly stops a SQLTrace.
- SQL Server stops a SQLTrace due to a standard SQL Server service shutdown.
SQL Server 7.0 also records a Windows NT event log entry when a SQLTrace is paused; however, that functionality does not exist with SQLTrace in SQL Server 2000. The SQL Profiler tool in SQL Server 2000 provides a Pause button, but the Pause button just stops and starts an existing SQLTrace without clearing the existing SQL Profiler window.
Each Windows NT event log entry created for these events is an "Information" type entry that is uniquely identified by information in the Description field. The Description field contains an ID, text that describes that ID, the Trace ID, and the LoginName of the user associated with the event.
The possible values for ID and the corresponding text are listed here:
- 19030 - SQL Trace started.
- 19031 - SQL Trace stopped.
- 19032 - SQL Trace stopped due to a server shutdown.
Here is an example Description field for a SQLTrace start Windows NT event log entry:
19030 :
SQL Trace started.
Trace ID = '1'
Login Name = 'MYDOMAIN\myadmin'
This feature is implemented within SQL Server so that it covers any execution of the sp_trace_setstatus stored procedure, which is used by the SQL Profiler tool to start and stop a SQLTrace.
Keywords: kbbug kbfix kbqfe kbsqlserv2000presp2fix kbhotfixserver KB307538
