Hi All,
we are getting the event ID 33205 application log on event viewer in every seconds since last two to three days. I am sure It wasn't there previously. below I have mentions the error description when we go to the properties of the ID 33205. When I did the Initial search on the Internet, It's saying that related to SQL.
Appreciate the help for disable this event ID from event viewer.
Audit event: audit_schema_version:1
event_time:2020-05-17 01:23:55.3753471
sequence_number:1
action_id:LGIS
succeeded:true
is_column_permission:false
session_id:196
server_principal_id:298
database_principal_id:0
target_server_principal_id:0
target_database_principal_id:0
object_id:0
user_defined_event_id:0
transaction_id:0
class_type:LX
permission_bitmask:00000000000000000000000000000000
sequence_group_id:B26FEF00D-4AE3-43A1-A78D-10A6F1AC530E
session_server_principal_name:Auar*******
server_principal_name:Auar*******
server_principal_sid:4bb28dd1c2d6cb4089e3a942ew2fec0c
database_principal_name:
target_server_principal_name:
target_server_principal_sid:
target_database_principal_name:
server_instance_name:S**-MS******
database_name:
schema_name:
object_name:
statement:-- network protocol: TCP/IP
set quoted_identifier on
set arithabort off
set numeric_roundabort off
set ansi_warnings on
set ansi_padding on
set ansi_nulls on
set concat_null_yields_null on
set cursor_close_on_commit off
set implicit_transactions off
set language us_english
set dateformat mdy
set datefirst 7
set transaction isolation level read committed
additional_information:<action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"><pooled_connection>1</pooled_connection><client_options>0x28000020</client_options><client_options1>0x0001f438</client_options1><connect_options>0x00000000</connect_options><packet_data_size>8000</packet_data_size><address>10.0.111.202</address><is_dac>0</is_dac></action_info>
user_defined_information:
.
Thanks in advance
Dilan