Extended Events->System_health->Watch Live Data Output - Security_error_ring_buffer_recorded Events Query

  • Hi all,

    Just wondering how I should interpret these log messages when I watch live data if there are no failed Login attempts logged in the SQL Server Logs?

    Any advice appreciated.

    Kind Regards,

    Matt

  • There are a lot of these entries which are happening and I am concerned if there is a problem or not given that the SQL Server Log's doesn't show any errors.

  • What log messages specifically are you seeing?

    Gail Shaw
    Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
    SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability

    We walk in the dark places no others will enter
    We stand on the bridge and no one may pass
  • Hi Gail,

    The log i am seeing is "security_error_ring_buffer_recorded".

    pretty much i have drilled into the system_health section of management studio in sql 2012

    and chose to "watch Live Data" and i see these are ticking all the time.

    When I click on one of the Displayed events it shows

    api_nameImpersonateSecurityContext

    call_stack0x6ED03CDBFC0700002CAC2CDBFC070000F5012DDBFC070000086B2CDBFC070000CD5F2CDBFC070000E4D03CDBFC070000E03722DAFC070000843C22DAFC070000673922DAFC0700003FD624DAFC070000B0E024DAFC070000BBF024DAFC07000098D824DAFC0700007E16C7E6FC070000F1C34CE7FC070000

    calling_api_nameNLShimImpersonate

    error_code5023

    id0

    session_id3290

    timestamp534549

  • Any update on this? We see lot of events in System Health XE Session, but no error message in SQL Server Log. Can these be ignored?

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply