Change Auditor Coordinator can not get SQL EXPRESS events
The agent logs indicate the problem:
2017-03-10 05:02:34.041 [4156][INFO] Found 1 SQL instances
2017-03-10 05:02:34.041 [4156][INFO] Tracing SQL instance SQLEXPRESS
2017-03-10 05:02:34.856 [6032][WARN] Cannot find provider SQLEXPRESSTrace...
2017-03-10 05:02:34.856 [6032][WARN] Cannot create trace session for instance SQLEXPRESS
Change Auditor does not support auditing SQL Express because the required components do not exist natively to allow to work
There is no workaround - This is a SQL Express limitation
