Home All Groups Group Topic Archive Search About

c2 files/sysxmitqueue



Author
19 Jun 2009 3:19 PM
guest5
Hi

I have an issue at the moment where large no of c2 audit trace files are
being generated for audit event 114. At the same time msdb is being rapidly
filled by sysxmitqueue.

I am unsure whats changed as this server has not had this issue presviously.
Its SQL 2005 sp2.

Would very much appreciate some advise?

Author
20 Jun 2009 10:09 AM
John Bell
Show quote Hide quote
"guest5" <gue***@discussions.microsoft.com> wrote in message
news:C9078187-03B1-4EC6-9A50-40722B7F4C34@microsoft.com...
> Hi
>
> I have an issue at the moment where large no of c2 audit trace files are
> being generated for audit event 114. At the same time msdb is being
> rapidly
> filled by sysxmitqueue.
>
> I am unsure whats changed as this server has not had this issue
> presviously.
> Its SQL 2005 sp2.
>
> Would very much appreciate some advise?

Audit Event 114 is "Audit Schema Object Access Event" ie where a specific
permision has been granted and used.

sys.sysxmitqueue is related to service broker so you may want to look around
that.

As Service Pack 3 is already out I am not sure why you haven't move to that
instead of SP2??

John
Are all your drivers up to date? click for free checkup

Author
20 Jun 2009 3:33 PM
guest5
Thanks for replying. The application is doing very frequent select from a
schema.table named Security.UserGroups. Does audit event 114 capture every
select, update etc every time? Its c2 on 2005 so unfortunately trace is not
configurable and application claims to run these selects frequently.

sysxmitqueue - are you aware of a way topurge this queue other tan by
running alter database msdb] SET NEW_BROKER WITH ROLLBACK IMMEDIATE?

In the process of testing sp3 in dev.

Thanks

Show quoteHide quote
"John Bell" wrote:

>
> "guest5" <gue***@discussions.microsoft.com> wrote in message
> news:C9078187-03B1-4EC6-9A50-40722B7F4C34@microsoft.com...
> > Hi
> >
> > I have an issue at the moment where large no of c2 audit trace files are
> > being generated for audit event 114. At the same time msdb is being
> > rapidly
> > filled by sysxmitqueue.
> >
> > I am unsure whats changed as this server has not had this issue
> > presviously.
> > Its SQL 2005 sp2.
> >
> > Would very much appreciate some advise?
>
> Audit Event 114 is "Audit Schema Object Access Event" ie where a specific
> permision has been granted and used.
>
> sys.sysxmitqueue is related to service broker so you may want to look around
> that.
>
> As Service Pack 3 is already out I am not sure why you haven't move to that
> instead of SP2??
>
> John
>
>
>
>
Author
20 Jun 2009 8:05 PM
John Bell
You will get a 114 statement for each object ion a statement e.g

SELECT * FROM t1

would generate 1 event

SELECT * FROM t1
JOIN t2 on t1.id = t2.id

would generate 2 events

You can always verify this with SQL Profiler.


You would need to check msdb.sys.transmission_queue  and find out the
reasons why transmission failed see
http://msdn.microsoft.com/en-us/library/ms166044.aspx, fix that and the
messages will be removed from the queue.

John

Show quoteHide quote
"guest5" <gue***@discussions.microsoft.com> wrote in message
news:C11B9877-90A0-495C-A361-4E405CA04FC8@microsoft.com...
> Thanks for replying. The application is doing very frequent select from a
> schema.table named Security.UserGroups. Does audit event 114 capture every
> select, update etc every time? Its c2 on 2005 so unfortunately trace is
> not
> configurable and application claims to run these selects frequently.
>
> sysxmitqueue - are you aware of a way topurge this queue other tan by
> running alter database msdb] SET NEW_BROKER WITH ROLLBACK IMMEDIATE?
>
> In the process of testing sp3 in dev.
>
> Thanks
>
> "John Bell" wrote:
>
>>
>> "guest5" <gue***@discussions.microsoft.com> wrote in message
>> news:C9078187-03B1-4EC6-9A50-40722B7F4C34@microsoft.com...
>> > Hi
>> >
>> > I have an issue at the moment where large no of c2 audit trace files
>> > are
>> > being generated for audit event 114. At the same time msdb is being
>> > rapidly
>> > filled by sysxmitqueue.
>> >
>> > I am unsure whats changed as this server has not had this issue
>> > presviously.
>> > Its SQL 2005 sp2.
>> >
>> > Would very much appreciate some advise?
>>
>> Audit Event 114 is "Audit Schema Object Access Event" ie where a specific
>> permision has been granted and used.
>>
>> sys.sysxmitqueue is related to service broker so you may want to look
>> around
>> that.
>>
>> As Service Pack 3 is already out I am not sure why you haven't move to
>> that
>> instead of SP2??
>>
>> John
>>
>>
>>
>>

Bookmark and Share