InstantForum.NET v2.9.0SQLServerCentralhttp://www.sqlservercentral.com/Forums/notifications@sqlservercentral.comSat, 18 May 2013 10:51:16 GMT20http://www.sqlservercentral.com/Forums/Topic887852-566-1.aspxThank you for the salute Jason and Thanks for identifying the fix, Chris;Something that might escape some folks is did you know that C2 auditing is just another version of a trace?a lot of people think it's one of those black box/magical complex things only super dba's know, and it's all requirement for SOX compliance.fortunately, a trace is a trace...it's just 1100 lines of events it is going to capture, compared to ~770 for the default trace.As an example, here are a couple of traces I ran off of my SLQ2008 server; one is the trace created by C2 Auditing, and the other is one created from the default trace.[b][url=http://www.stormrage.com/SQLStuff/c2_audit_trace_script.txt]c2_audit_trace_script.txt[/url][/b][b][url=http://www.stormrage.com/SQLStuff/default_trace_script.txt]default_trace_script.txt[/url][/b]I just love looking at the details i guess.To do it yourself, it really easy to enable the C2 Auditing to test this: it's in the SSMS, you simply right click on your server, select properties, and there is a check box on the security tab.The C2 Audit requires a start and stop of the SQL Server to get it in place, and it becomes traceid 1, with the default trace = traceid 2; I had really grown accustomed to the default trace being traceid = 1, so it was another thing to learn on this one that it could move around.here is a link to download the version whitht he correction that Chris identified:[b][url=http://www.stormrage.com/SQLStuff/sp_ScriptAnyTrace.txt]sp_ScriptAnyTrace.txt[/url][/b]Tue, 23 Mar 2010 06:11:11 GMTLowellhttp://www.sqlservercentral.com/Forums/Topic887852-566-1.aspxGreat article, this will be very useful.I spotted a typo on line 65 of your stored proc: from ::fn_trace_geteventinfo(1) AS X...should be: from ::fn_trace_geteventinfo(@traceid) AS XCheersChrisTue, 23 Mar 2010 03:04:57 GMTChris Howarth-536003http://www.sqlservercentral.com/Forums/Topic887852-566-1.aspxExcellent topic and excellent article.Thanks Lowell. This is very useful stuff to have in the tool-belt.Tue, 23 Mar 2010 01:08:05 GMTSQLRNNRhttp://www.sqlservercentral.com/Forums/Topic887852-566-1.aspxComments posted to this topic are about the item [B]<A HREF="/articles/trace/69559/">Reverse Engineering a Server Side Trace</A>[/B]Tue, 23 Mar 2010 00:02:21 GMTLowell