Event Name
Event Class
TextData
Binary Data
DatabaseID
TransactionID
NTUserName
NTDomainName
Client Host Name
Client Process ID
ApplicationName
Std Security LoginName
SPID
Duration
StartTime
EndTime
Reads
Writes
CPU
Permissions
Severity
EventSubClass
ObjectID
Success
IndexID
IntegerData
ServerName
Object Type
Nest Level
State
Error
Mode
Handle
Object Name
Database Name
Filename
Object Owner (OwnerName)
RoleName
Target UserName
Database UserName
Login SID
Target LoginName
Target LoginSID
Column Permissions
Runtime Handle
27
1
2
3
4
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
POST_RPC_EVENT_CLASS
10
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
PRE_RPC_EVENT_CLASS
11
X
X
X
X
X
X
X
X
X
X
X
X
X
POST_LANG_EVENT_CLASS
12
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
PRE_LANG_EVENT_CLASS
13
X
X
X
X
X
X
X
X
X
X
X
X
X
AUDIT_LOGIN_EVENT_CLASS
14
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
AUDIT_LOGOUT_EVENT_CLASS
15
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
ATTENTION_EVENT_CLASS
16
X
X
X
X
X
X
X
X
X
X
X
X
X
X
AUDIT_EXISTING_EVENT_CLASS
17
X
X
X
X
X
X
X
X
X
X
X
X
X
AUDIT_SERVER_START_STOP
18
X
X
X
X
X
X
X
X
X
X
X
X
X
DTC_EVENT_CLASS
19
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
AUDIT_LOGIN_FAILURE_EVENT_CLASS
20
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
EVENTLOG_EVENT_CLASS
21
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
ERRORLOG_EVENT_CLASS
22
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
LCK_RELEASE_EVENT_CLASS
23
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
LCK_ACQUIRE_EVENT_CLASS
24
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
LCK_DEADLOCK_EVENT_CLASS
25
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
LCK_CANCEL_EVENT_CLASS
26
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
LCK_TIMEOUT_EVENT_CLASS
27
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
DOP_EVENT_CLASS
28
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
(redirect to 28)
29
(redirect to 28)
30
(redirect to 28)
31
(not used)
32
EXCEPTION_EVENT_CLASS
33
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
CP_MISS_EVENT_CLASS
34
X
X
X
X
X
X
X
X
X
X
X
X
X
X
CP_INSERT_EVENT_CLASS
35
X
X
