Trojans - Implementing Database Security and Auditing - page 286

Table 9.2 Available column entries for a SQL Server trace event (continued)

Column
number

Column name Description

15

EndTime Time at which the event ended. This column is not populated for

starting event classes, such as SQL:BatchStarting or SP:Starting. It is
also not populated by the Hash Warning event.

16

Reads Number of logical disk reads performed by the server on behalf of

the event. This column is not populated by the Lock:Released event.

17

Writes Number of physical disk writes performed by the server on behalf of

the event.

18

CPU Amount of CPU time (in milliseconds) used by the event.

19

Permissions Represents the bitmap of permissions; used by Security Auditing.

20

Severity Severity level of an exception.

21

EventSubClass Type of event subclass. This data column is not populated for all

event classes.

22

ObjectID System-assigned ID of the object.

23

Success Success of the permissions usage attempt; used for auditing.

1 = success
0 = failure

24

IndexID ID for the index on the object affected by the event. To determine

the index ID for an object, use the indid column of the sysindexes
system table.

25

IntegerData Integer value dependent on the event class captured in the trace.

26

ServerName Name of the instance of SQL Server (either servername or server-

name\instancename) being traced.

27

EventClass Type of event class being recorded.

28

ObjectType Type of object (such as table, function, or stored procedure).

29

NestLevel The nesting level at which this stored procedure is executing.

30

State Server state, in case of an error.

31

Error Error number.

32

Mode Lock mode of the lock acquired. This column is not populated by

the Lock:Released event.

33

Handle Handle of the object referenced in the event.