The SQL Compliance Manager Agent manages the SQL trace that collects audit data. If the SQL trace is stopped, modified, paused, or deleted by another application, the SQL Compliance Manager Agent restarts the trace and checks the trace status. The Collection Server then logs an event indicating the current trace status.
You can set the trace tamper detection interval from the SQL Compliance Manager Agent Properties window. For more information, see Configure how the SQL Compliance Manager Agent manages trace files.
If an issue has occurred, one of the following events will display on the Agent Events tab of the SQL Compliance Manager Activities tab.
| This Agent Event … | Means … |
|---|---|
| Trace stopped | The SQL trace was stopped but still exists on the audited SQL Server instance. |
| Trace missing | The SQL trace that was running no longer exists on the audited SQL Server instance. The SQL Compliance Manager Agent started a new trace. |
| Trace altered | A SQL trace setting was altered. |