Change Auditor for SQL Server 7.1.1 - Event Reference Guide

Introduction Change Auditor for SQL Server Events

SQL Broker Event SQL CLR Event SQL Cursors Event SQL Database Event SQL Deprecation Event SQL Errors and Warnings Event SQL Full Text Event SQL Locks Event SQL Objects Event SQL OLEDB Event SQL Performance Event SQL Progress Report Event SQL Query Notifications Event SQL Scan Event SQL Security Audit Event SQL Server Event SQL Session Event SQL Stored Procedures Event SQL Transactions Event SQL TSQL Event SQL User-Configurable Event SQL Data Level Event

Log Events

SQL Transactions Event

The SQL Transactions Event facility contains event classes that can be used to monitor the status of transactions. The event class names prefixed with TM: are used to track the transaction-related operations that are sent through the transmission management interface.

Table 19. SQL Transactions events
Event	Description	Severity
DTCTransaction – Close Connection	Created when Distributed Transaction Coordinator state is Close Connection.	Medium
DTCTransaction – Creating a New DTC Transaction	Created when Distributed Transaction Coordinator state is Creating A New DTC Transaction.	Medium
DTCTransaction – Enlisting in a DTC Transaction	Created when Distributed Transaction Coordinator state is Enlisting in A DTC Transaction.	Medium
DTCTransaction – Get Address	Created when Distributed Transaction Coordinator state is Get Address.	Medium
DTCTransaction – Internal Abort	Created when Distributed Transaction Coordinator state is Internal Abort.	Medium
DTCTransaction - Internal Active	Created when Distributed Transaction Coordinator state is Internal Active.	Medium
DTCTransaction – Internal Commit	Created when Distributed Transaction Coordinator state is Internal Commit.	Medium
DTCTransaction – Preparing Transaction	Created when Distributed Transaction Coordinator state is Preparing Transaction.	Medium
DTCTransaction – Propagate Transaction	Created when Distributed Transaction Coordinator state is Propagate Transaction.	Medium
DTCTransaction – TM Failed While In Prepared State	Created when Distributed Transaction Coordinator state is TM Failed While in Prepared State.	Medium
DTCTransaction – Transaction Is Aborting	Created when Distributed Transaction Coordinator state is Transaction is Aborting.	Medium
DTCTransaction – Transaction Is Committing	Created when Distributed Transaction Coordinator state is Transaction is Committing.	Medium
DTCTransaction – Transaction Is Prepared	Created when Distributed Transaction Coordinator state is Transaction is Prepared.	Medium
DTCTransaction – Unknown	Created when Distributed Transaction Coordinator state is Unknown.	Medium
SQLTransaction Begin	Created when a SQL transaction has begun. (Disabled by default)	Medium
SQLTransaction Commit	Created when a SQL transaction is committed. (Disabled by default)	Medium
SQLTransaction Rollback	Created when a SQL transaction is rolled back. (Disabled by default)	Medium
SQLTransaction Savepoint	Created when a SQL transaction is at savepoint. (Disabled by default)	Medium
TM: Begin Tran Completed	Created when a BEGIN TRANSACTION request has been completed.	Medium
TM: Begin Tran Starting	Created when a BEGIN TRANSACTION request is starting.	Medium
TM: Commit Tran Completed – Commit	Created when a COMMIT TRANSACTION request is completed.	Medium
TM: Commit Tran Completed – Commit and Begin	Created when a COMMIT TRANSACTION request is completed and a new transaction will be started after the current transaction is committed.	Medium
TM: Commit Tran Starting – Commit	Created when a COMMIT TRANSACTION request is starting.	Medium
TM: Commit Tran Starting – Commit and Begin	Created when a COMMIT TRANSACTION request is starting and a new transaction will be started after the current transaction is committed.	Medium
TM: Promote Tran Completed	Created when a PROMOTE TRANSACTION request has completed.	Medium
TM: Promote Tran Starting	Created when a PROMOTE TRANSACTION request is starting.	Medium
TM: Rollback Tran Completed – Rollback	Created when a ROLLBACK TRANSACTION request has completed.	Medium
TM: Rollback Tran Completed – Rollback and Begin	Created when a ROLLBACK TRANSACTION request has completed and a new transaction will be started after the current transaction is rolled back.	Medium
TM: Rollback Tran Starting – Rollback	Created when a ROLLBACK TRANSACTION request is starting.	Medium
TM: Rollback Tran Starting – Rollback and Begin	Created when a ROLLBACK TRANSACTION request is starting and a new transaction will be started after the current transaction is rolled back.	Medium
TM:Save Tran Completed	Created when a SAVE TRANSACTION request has completed.	Medium
TM:Save Tran Starting	Created when a SAVE TRANSACTION request has started.	Medium
TransactionLog	Created when a Transaction log activity has occurred. (Disabled by default)	Medium

SQL TSQL Event

The SQL TSQL Event facility contains general TSQL events.

Table 20. SQL TSQL events
Event	Description	Severity
Exec Prepared SQL	Created when the SqlClient, ODBC, OLEDB, or D-Library has executed a prepared Transact-SQL statement or statements. (Disabled by default)	Medium
Prepare SQL	Created when the SqlClient, ODBC, OLEDB, or D-Library has prepared a Transact-SQL statement or statements for use. (Disabled by default)	Medium
SQL:BatchCompleted	Created when a Transact-SQL batch has completed. (Disabled by default)	Medium
SQL:BatchStarting	Created when a Transact-SQL batch is starting. (Disabled by default)	Medium
SQL:StmtCompleted	Created when a Transact-SQL statement has completed. (Disabled by default)	Medium
SQL:StmtRecompile – Browse Permissions Changed	Created when statement-level recompilations occurred for browse permission changes.	Medium
SQL:StmtRecompile – Cursor Options Changed	Created when statement-level recompilations occurred for cursor options changes.	Medium
SQL:StmtRecompile – Deferred Compile	Created when statement-level recompilations occurred for deferred compiles. (Disabled by default)	Medium
SQL:StmtRecompile – Options Requested	Created when statement-level recompilations occurred for options (recompile) requests.	Medium
SQL:StmtRecompile – Partition View Changed	Created when statement-level recompilations occurred for partition view changes.	Medium
SQL:StmtRecompile – Query Notification Environment Changed	Created when statement-level recompilations occurred for query notification environment changed.	Medium
SQL:StmtRecompile – Remote Rowset Changed	Created when statement-level recompilations occurred for remote rowset changes.	Medium
SQL:StmtRecompile – Schema Changed	Created when statement-level recompilations occurred for schema changes.	Medium
SQL:StmtRecompile – Set Option Changed	Created when statement-level recompilations occurred for set option changes. (Disabled by default)	Medium
SQL:StmtRecompile – Statistics Changed	Created when statement-level recompilations occurred for statistics changes. (Disabled by default)	Medium
SQL:StmtRecompile – Temp Table Changed	Created when statement-level recompilations occurred for temp table changes.	Medium
SQL:StmtStarting	Created when a Transact-SQL statement has started. (Disabled by default)	Medium
Unprepare SQL	Created when the SqlClient, ODBC, OLEDB, or DB-Library has unprepared (deleted) a prepared Transact-SQL statement or statements. (Disabled by default)	Medium
XQuery Static Type	Created when the SQL Server® executed an XQuery expression. (Disabled by default)	Medium

SQL User-Configurable Event

Use the SQL User-Configurable Event facility to monitor user-defined events that cannot be audited by the system-supplied event classes in the other SQL facilities.

Table 21. SQL User-configurable events
Event	Description	Severity
User-Configurable-0	Created when User-Configurable event 0 occurs.	Medium
User-Configurable-1	Created when User-Configurable event 1 occurs.	Medium
User-Configurable-2	Created when User-Configurable event 2 occurs.	Medium
User-Configurable-3	Created when User-Configurable event 3 occurs.	Medium
User-Configurable-4	Created when User-Configurable event 4 occurs.	Medium
User-Configurable-5	Created when User-Configurable event 5 occurs.	Medium
User-Configurable-6	Created when User-Configurable event 6 occurs.	Medium
User-Configurable-7	Created when User-Configurable event 7 occurs.	Medium
User-Configurable-8	Created when User-Configurable event 8 occurs.	Medium
User-Configurable-9	Created when User-Configurable event 9 occurs.	Medium

SQL Data Level Event

The SQL Data Level facility contains event classes that are used to monitor SQL data changes.

Table 22. SQL Data Level Auditing events
Event	Description	Severity
Row added to a table	Created when a row has been added to a table.	High
Row updated in a table	Created when a row has been updated in a table.	High
Row removed from a table	Created when a row has been deleted from a table.	High
Table added	Created when a table has been added to a database.	High
Table removed	Created when a table has been deleted from a database.	High
Table altered	Created when a database table has been altered.	High
Table truncated	Created when a table has been truncated in a database.	Medium
View added	Created when a view is added to a database.	Medium
View removed	Created when a view has been deleted from a database.	Medium
View altered	Created when a database view has been altered.	Medium
Procedure added	Created when a procedure has been added to a database.	Medium
Procedure removed	Created when a table has been deleted from a database.	Medium
Procedure altered	Created when a database procedure has been altered.	Medium
Function added	Created when a function table has been added to a database.	Medium
Function removed	Created when a function has been deleted from a database.	Medium
Function altered	Created when a database function has been altered.	Medium
Index added to a table	Created when an index has been added to a table.	Medium
Index removed from a table	Created when an index has been deleted from a table.	Medium
Trigger added	Created when a trigger has been added.	Medium
Trigger removed	Created when a trigger has been deleted.	Medium
Trigger altered	Created when a table trigger has been altered.	Medium
Rule added	Created when a rule has been added to a database.	Medium
Rule removed	Created when a rule has been deleted from a database.	Medium
Object renamed	Created when a database object has been renamed.	Medium
Primary key added to a table	Created when a primary key has been added to a table.	Medium
Primary key removed from a table	Created when a primary key has been deleted from a table.	Medium
Foreign key added to a table	Created when a foreign key has been added to a table.	Medium
Foreign key removed from a table	Created when a foreign key has been deleted from a table.	Medium
Default object added	Created when a default object has been added to a database.	Medium
Default object removed	Created when a default object has been deleted from a database.	Medium
Default constraint added to a table	Created when a default constraint has been added to a table.	Medium
Default constraint removed from a table	Created when a default constraint has been deleted from a table.	Medium
Check constraint added to a table	Created when a check constraint has been added to a table.	Medium
Check constraint removed from a table	Created when a check constraint has been deleted from a table.	Medium
Type added	Created when a type has been added to a database.	Medium
Type removed	Created when a type has been deleted from a database.	Medium
Statistics added to a table	Created when statistics have been added to a table.	Medium
Statistics removed from a table	Created when statistics have been deleted from a table.	Medium
User added	Created when a user has been added to a database.	High
User removed	Created when a user has been removed from a database.	High

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem

Change Auditor for SQL Server 7.1.1 - Event Reference Guide

SQL Transactions Event

SQL TSQL Event

SQL User-Configurable Event

SQL Data Level Event