May 5, 2011 at 10:16 am
I found yesterday evening one of our sql server are restarted; I checked with some guys who are the main users of the server, no one said they restarted the service.
How can I find out who restarted SQL server?
I found the server restarted by looking at sql server log:
Message:
Microsoft SQL Server 2008 (SP1) - 10.0.2531.0 (X64)
Mar 29 2009 10:11:52
Copyright (c) 1988-2008 Microsoft Corporation
Standard Edition (64-bit) on Windows NT 6.0 <X64> (Build 6002: Service Pack 2)
......
Logging SQL Server messages in file 'D:\Program Files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Log\ERRORLOG'.
SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
......
Service Broker manager has started.
.....
SQL Server is now ready for client connections. This is an informational message; no user action is required.
Do these messages mean someone start the service?
Thanks
May 5, 2011 at 10:30 am
What you see in the error log is indeed part of the startup messages logged by SQL Server.
You can see who started and stopped a service in Event Viewer/System. Look through events with Event ID 7035. You should find SQL Server in the description of one of the events.
May 5, 2011 at 12:04 pm
Thanks, but I'm not asking the system or the server, I'm asking sql server services, do those messages in sql server log mean the sql server service is restarted?
Thanks
May 5, 2011 at 12:31 pm
In the Event Viewer you can Filter on the Event to narrow the Events to Sql Server Event Types.
You can also do the following:
For better, quicker answers on T-SQL questions, click on the following...
http://www.sqlservercentral.com/articles/Best+Practices/61537/
For better answers on performance questions, click on the following...
http://www.sqlservercentral.com/articles/SQLServerCentral/66909/
May 5, 2011 at 1:07 pm
sql server is also a service. you should find it in there.
May 5, 2011 at 1:28 pm
I cannot find eventID 7035. Also MSSQLserver related event users are all n/a
So I go to Security tab of windows log and checked records happen in that time
I found messages below:
1.Audit events have been dropped by the transport.
2.The real time backup file was corrupt due to improper shutdown.
Windows is starting up.
3.An account was successfully logged on.
Subject:
Security ID:NULL SID
Account Name:-
Account Domain:-
Logon ID:0x0
Logon Type:0
New Logon:
Security ID:SYSTEM
Account Name:SYSTEM
Account Domain:NT AUTHORITY
Logon ID:0x3e7
Logon GUID:{00000000-0000-0000-0000-000000000000}
Process Information:
Process ID:0x3000300000004
Process Name:
Network Information:
Workstation Name:-
Source Network Address:-
Source Port:-
Does this mean the windows start it by itself?
What could cause windows start by itself?
May 5, 2011 at 2:12 pm
You should give it another shot and examine the Event Logs to determine what was restarted and when.
Are you familiar with the Event Logs. If not I would encourage you to do that so that you find out is going on.
Are you a Local Administrator or above for the Server and can you Logon?
How often does this happen and when?
Is the Server set to restart and/or is someone doing this? Have you checked the event logs.
You might want to take a little more time to research, Event Logs, etc.
Request additional information so that someone can assist you.
Regards.
For better, quicker answers on T-SQL questions, click on the following...
http://www.sqlservercentral.com/articles/Best+Practices/61537/
For better answers on performance questions, click on the following...
http://www.sqlservercentral.com/articles/SQLServerCentral/66909/
May 9, 2011 at 12:34 am
Machine is Server Class or Desktop Class ? watch your RAM continously and check twice at which level OS restart it , if at the same level then RAM is a good candidate of OS restart and check OS level event viewer
Regards,
Syed Jahanzaib Bin Hassan
BSCS | MCTS | MCITP | OCA | OCP | OCE | SCJP | IBMCDBA
My Blog
www.aureus-salah.com
May 9, 2011 at 3:21 am
Syed Jahanzaib Bin hassan (5/9/2011)
Machine is Server Class or Desktop Class ? watch your RAM continously and check twice at which level OS restart it , if at the same level then RAM is a good candidate of OS restart and check OS level event viewer
I really don't understand what you are getting at here... can you expand a bit please?
Are you saying that SQL Server or the OS will automatically restart when is uses a certain amount of RAM?
Viewing 9 posts - 1 through 9 (of 9 total)
You must be logged in to reply to this topic. Login to reply