gary1 - Tuesday, March 13, 2018 3:43 PM
If you still have default traces from that time, it would be in there.
Event class would be Audit Server Alter Trace Event. You'd look for exec sp_trace_create in the text data. Application name would be SQL Server Profiler - xxxxxxx
Sue