April 20, 2009 at 11:23 am
We have SQL Server 2000 (sp3) running on Windows Server 2003. I enabled the 'C2 audit mode' option about a week ago. This option records access to statements and objects. (I was tightening up on security and it was recommended to set this option.) I noticed there are a bunch of files (audittrace_datestamp.trc) being created in the \mssql\data directory. Each file is 200 MB. These files are eating up my disk space. I have a few questions:
1) How do you review these files? Do you open them with Notepad?
2) Is there a SQL Server Option which can be set so that the files are automatically removed and only a certain number of the files are kept? If there is not an option, does anyone have a script?
Thanks in advance, Kevin
April 20, 2009 at 1:15 pm
From the BOL entry on C2 Auditing:
If the audit directory fills up, the instance of SQL Server will be stopped. You can restart the instance of SQL Server if auditing is not set to start up automatically. But if auditing is set to start up automatically, you must free up disk space for the audit log before you can restart the instance of SQL Server.
To read the trace file you can use Profiler or fn_trace_gettable.
To delete the files you would need to do something outside SQL Server.
To be honest, I think you should define your own server-side trace with the events you need.
Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question
Viewing 2 posts - 1 through 1 (of 1 total)
You must be logged in to reply to this topic. Login to reply