Submit a ticketCall us

WebinarWebinar: A checklist for planning your Network Performance Monitor (NPM) upgrade

Are you ready for your next upgrade? To help you plan smoothly, join this webcast to learn more about, SolarWinds® Orion® Installer, SolarWinds Upgrade Advisor, Upgrades Guides, Training Videos, and other resources available. We’ll share key upgrade planning considerations, lessons learned from customers with practical advice from SolarWinds Product Experts. We’ll also give practical tips to identify the estimated time needed and resources, how to prepare the business and IT staff for changes, ways to plan for required system changes, and more.

Register now.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Create a Custom SQL Auditor Trace File (.tdf)

Create a Custom SQL Auditor Trace File (.tdf)

Table of contents
Created by Jason Dee, last modified by MindTouch on Jun 23, 2016

Views: 1,477 Votes: 1 Revisions: 25

Overview

The MSSQL Auditor is sending SQL events that are too numerous or simply not needed. This can be solved by modifying the SQL Auditor trace file to filter the events that are being sent to the LEM.

Environment

  • All LEM versions
  • All SQL Server versions

Steps

1. Import the trace template into SQL Profiler (double click the tdf.  located in C:\Program Files (x86)\SolarWinds Log and Event Manager MSSQL Auditor\tdfs by default).

2. Edit the template (File > Templates > Edit Template > Select our template) and open Events Selection tab.

3. Click on the Column Filters... button (you should be able to see a dialog similar to what is shown in the attached screenshot), select DBUserName column, and add the LIKE/NOT LIKE condition as applicable.

 

Edit Filter

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

4. Save the template, replace the one inside the C:\Program Files (x86)\SolarWinds Log and Event Manager MSSQL Auditor\tdfs folder with the file that is located at C:\Users\<user>\AppData\Roaming\Microsoft\SQL Profiler\12.0\Templates\Microsoft SQL Server\120

5. Restart the MSSQLAuditor service.

Last modified

Tags

Classifications

Public