FIX: SQLTrace Start and Stop is Now Reported in Windows NT Event Log for SQL Server 2000 (307538)


The information in this article applies to:

  • Microsoft SQL Server 2000 (all editions)
This article was previously published under Q307538
BUG #: 355405 (SHILOH_BUGS)

SYMPTOMS

In Microsoft SQL Server 7.0 when you start, stop or pause a SQLTrace, SQL Server 7.0 writes an entry that corresponds to one of these events to the Microsoft Windows NT event log. SQL Server 2000 does not implement the same auditing feature.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft SQL Server 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

290211 INF: How to Obtain the Latest SQL Server 2000 Service Pack

Hotfix

NOTE: The following hotfix was created prior to Microsoft SQL Server 2000 Service Pack 2.

The English version of this fix should have the following file attributes or later: 
   Version      File name        Platform
   --------------------------------------

   8.00.443     Sqlservr.exe     i386
   8.00.443     Sqlevn70.rll     i386
NOTE: Due to file dependencies, the most recent hotfix or feature that contains the preceding files may also contain additional files.

STATUS

Microsoft has confirmed this to be a problem in SQL Server 2000. This problem was first corrected in Microsoft SQL Server 2000 Service Pack 2.

MORE INFORMATION

With this fix, SQL Server 2000 now records entries to the Windows NT event log if the following situations occur associated with a SQLTrace:

  • A user explicitly starts a SQLTrace.

  • A user explicitly stops a SQLTrace.

  • SQL Server stops a SQLTrace due to a standard SQL Server service shutdown.
SQL Server 7.0 also records a Windows NT event log entry when a SQLTrace is paused; however, that functionality does not exist with SQLTrace in SQL Server 2000. The SQL Profiler tool in SQL Server 2000 provides a Pause button, but the Pause button just stops and starts an existing SQLTrace without clearing the existing SQL Profiler window.

Each Windows NT event log entry created for these events is an "Information" type entry that is uniquely identified by information in the Description field. The Description field contains an ID, text that describes that ID, the Trace ID, and the LoginName of the user associated with the event.

The possible values for ID and the corresponding text are listed here:

  • 19030 - SQL Trace started.

  • 19031 - SQL Trace stopped.

  • 19032 - SQL Trace stopped due to a server shutdown.
Here is an example Description field for a SQLTrace start Windows NT event log entry: 
19030 :
SQL Trace started.
Trace ID = '1'
Login Name = 'MYDOMAIN\myadmin'
This feature is implemented within SQL Server so that it covers any execution of the sp_trace_setstatus stored procedure, which is used by the SQL Profiler tool to start and stop a SQLTrace.
Modification Type:MinorLast Reviewed:9/26/2005
Keywords:kbHotfixServer kbQFE kbbug kbfix kbSQLServ2000preSP2Fix KB307538
©2004 Microsoft Corporation. All rights reserved.