Enabling C2 Audit Logon causes sqlserver to be disabled

Enabling C2 Audit Logon causes sqlserver to be disabled

Previous/next article 10:01:07/personal classification: SQL Server

View (187)/comment (2)/score (10/0)

Always running very stableDatabaseServer(Sqlserver2008), suddenlySQL ServerThe connection fails. Check the server and find that the SQL Server service is stopped because the disk C is full (SQL ServerInstallC :\... \ MSSQL \ data has many files named "audittrace201000502112519_15.trc". The file size is 200 MB. After these files are deleted, many such files will be automatically generated in a short time.

Check the server configuration and find that C2 audit trail is enabled (server properties/Security.

After the C2 audit trail is enabled, SQL Server reviews and checks all access statements and objects, and records them in files under the \ MSSQL \ data directory. if the size of the audit log file reaches the maximum limit (200 MB), SQL Server creates a new file, closes the old file, and records all new audit data to the new file. This process continues until the audit data directory is full or the audit is closed. You can query the SYS. Traces view to determine the C2 trace status.

If the log directory space is insufficient, SQL Server will shut down itself. to restart SQL Server after forced shutdown, use the-F flag to bypass review or release more space for Review logs.

-- Disable or enable C2 audit trail

Exec sp_configure 'c2 audit mode ', <0 or 1>

Go

Reconfigure

.