The SQLcompliance Agent manages the SQL trace that collects audit data. If the SQL trace is stopped, modified, paused, or deleted by another application , the SQLcompliance Agent restarts the trace and checks the trace status. The Collection Server then logs an event indicating the current trace status.
You can set the trace tamper detection interval from the SQLcompliance Agent Properties window. For more information, see Configure how the SQLcompliance Agent manages trace files.
If an issue has occurred , one of the following events will display on the Agent Events tab of the SQL Compliance Manager Activities tab.
| This Agent Event … | Means … |
|---|---|
| Trace stopped | The SQL trace was stopped but still exists on the audited SQL Server instance. |
| Trace missing | The SQL trace that was running no longer exists on the audited SQL Server instance. The SQLcompliance Agent started a new trace. |
| Trace altered | A SQL trace setting was altered. |