<?xml version="1.0" encoding="utf-8"?>
<EventColumnDescriptions xmlns="http://tempuri.org/xmlfile.xsd">
  <_locDefinition>
    <_locDefault _loc="locNone" />
    <_locTag _loc="locData">DESCRIPTION</_locTag>
    <_locTag _loc="locData">BESTPRACTICE</_locTag>
  </_locDefinition>
  <EVENTCATEGORIESLIST>
    <EVENTCATEGORY>
      <NAME>Cursors</NAME>
      <DESCRIPTION>Collection of events produced when cursors are created, used and deleted.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Database</NAME>
      <DESCRIPTION>Collection of events that are produced when data/log files grow/shrink automatically.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Errors and Warnings</NAME>
      <DESCRIPTION>Collection of event classes that are produced when a SQL Server error or warning occurs (for example, an error during the compilation of a stored procedure, or an exception in SQL Server).</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Locks</NAME>
      <DESCRIPTION>Collection of database object locking event classes.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Objects</NAME>
      <DESCRIPTION>Collection of event classes that are produced when database objects are created, opened, closed, dropped, or deleted.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Performance</NAME>
      <DESCRIPTION>Collection of showplan event classes and event classes that are produced from the execution of SQL data manipulation language (DML) operators.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Scans</NAME>
      <DESCRIPTION>Collection of database object scan event classes. Database objects that can be scanned include tables and indexes.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Security Audit</NAME>
      <DESCRIPTION>Collection of database audit event classes.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Server</NAME>
      <DESCRIPTION>Collection of server control and server memory change events.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Sessions</NAME>
      <DESCRIPTION>Collection of event classes that are produced by clients connecting to and disconnecting from SQL Server.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Stored Procedures</NAME>
      <DESCRIPTION>Collection of event classes that are produced by the execution of stored procedures.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>Transactions</NAME>
      <DESCRIPTION>Collection of event classes that are produced by the execution of MS DTC or SQL transactions or by writing to the transaction log.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>TSQL</NAME>
      <DESCRIPTION>Collection of event classes that are produced by the execution of SQL passed to SQL Server from the client.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
    <EVENTCATEGORY>
      <NAME>User configurable</NAME>
      <DESCRIPTION>Collection of user configurable event classes.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENTCATEGORY>
  </EVENTCATEGORIESLIST>
  <EVENTLIST>
    <!--RPC:Completed-->
    <EVENT>
      <ID>10</ID>
      <DESCRIPTION>Occurs when a remote procedure call has been completed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--RPC:Starting-->
    <EVENT>
      <ID>11</ID>
      <DESCRIPTION>Occurs when a remote procedure call has started.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SQL:BatchCompleted-->
    <EVENT>
      <ID>12</ID>
      <DESCRIPTION>Occurs when the Transact-SQL statement has completed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SQL:BatchStarting-->
    <EVENT>
      <ID>13</ID>
      <DESCRIPTION>Occurs when a Transact-SQL batch is starting.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Login-->
    <EVENT>
      <ID>14</ID>
      <DESCRIPTION>Collects all new connection events since the trace was started, such as when a client requests a connection to a server running an instance of SQL Server.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Logout-->
    <EVENT>
      <ID>15</ID>
      <DESCRIPTION>Collects all new disconnect events since the trace was started, such as when a client issues a disconnect command.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Attention-->
    <EVENT>
      <ID>16</ID>
      <DESCRIPTION>Collects all attention events, such as client interrupt request or when a client connection is broken.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--ExistingConnection-->
    <EVENT>
      <ID>17</ID>
      <DESCRIPTION>Detects activity by all users connected to SQL Server before the trace was started; otherwise, these existing connections would not be detected by the Connect event class.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Server Starts And Stops-->
    <EVENT>
      <ID>18</ID>
      <DESCRIPTION>Records service shut down, start, and pause activities.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--DTCTransaction-->
    <EVENT>
      <ID>19</ID>
      <DESCRIPTION>Tracks MS DTC coordinated transactions between two or more databases.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Login Failed-->
    <EVENT>
      <ID>20</ID>
      <DESCRIPTION>Indicates that a login attempt to SQL Server from a client failed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--EventLog-->
    <EVENT>
      <ID>21</ID>
      <DESCRIPTION>Indicates events logged in the Windows application event log.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--ErrorLog-->
    <EVENT>
      <ID>22</ID>
      <DESCRIPTION>Indicates error events logged in the SQL Server error log.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Released-->
    <EVENT>
      <ID>23</ID>
      <DESCRIPTION>Indicates that a lock on a resource, such as a page, has been released.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Acquired-->
    <EVENT>
      <ID>24</ID>
      <DESCRIPTION>Indicates acquisition of a lock on a resource, such as a data page.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Deadlock-->
    <EVENT>
      <ID>25</ID>
      <DESCRIPTION>Indicates that two concurrent transactions have deadlocked each other by trying to obtain incompatible locks on resources the other transaction owns.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Cancel-->
    <EVENT>
      <ID>26</ID>
      <DESCRIPTION>Indicates that the acquisition of a lock on a resource has been canceled (for example, due to a deadlock).</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Timeout-->
    <EVENT>
      <ID>27</ID>
      <DESCRIPTION>Indicates that a request for a lock on a resource, such as a page, has timed out due to another transaction holding a blocking lock on the required resource.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Degree of Parallelism (7.0 Insert)-->
    <EVENT>
      <ID>28</ID>
      <DESCRIPTION>Describes the degree of parallelism assigned to the SQL statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Degree of Parallelism (7.0 Update)-->
    <EVENT>
      <ID>29</ID>
      <DESCRIPTION>Describes the degree of parallelism assigned to the SQL statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Degree of Parallelism(7.0 Delete)-->
    <EVENT>
      <ID>30</ID>
      <DESCRIPTION>Describes the degree of parallelism assigned to the SQL statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Degree of Parallelism(7.0 Select)-->
    <EVENT>
      <ID>31</ID>
      <DESCRIPTION>Describes the degree of parallelism assigned to the SQL statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Exception-->
    <EVENT>
      <ID>33</ID>
      <DESCRIPTION>Indicates that an exception has occurred in SQL Server.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:CacheMiss-->
    <EVENT>
      <ID>34</ID>
      <DESCRIPTION>Indicates when a stored procedure is not found in the procedure cache.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:CacheInsert-->
    <EVENT>
      <ID>35</ID>
      <DESCRIPTION>Indicates when an item is inserted into the procedure cache.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:CacheRemove-->
    <EVENT>
      <ID>36</ID>
      <DESCRIPTION>Indicates when an item is removed from the procedure cache.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:Recompile-->
    <EVENT>
      <ID>37</ID>
      <DESCRIPTION>Indicates that the stored procedure is recompiling.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:CacheHit-->
    <EVENT>
      <ID>38</ID>
      <DESCRIPTION>Indicates when a procedure is found in the cache.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:ExecContextHit-->
    <EVENT>
      <ID>39</ID>
      <DESCRIPTION>Indicates the context of the local state for the executing procedure.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SQL:StmtStarting-->
    <EVENT>
      <ID>40</ID>
      <DESCRIPTION>Occurs when the Transact-SQL statement is starting.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SQL:StmtCompleted-->
    <EVENT>
      <ID>41</ID>
      <DESCRIPTION>Occurs when the Transact-SQL statement has completed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:Starting-->
    <EVENT>
      <ID>42</ID>
      <DESCRIPTION>Indicates when the stored procedure has started.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:Completed-->
    <EVENT>
      <ID>43</ID>
      <DESCRIPTION>Indicates when the stored procedure has completed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:StmtStarting-->
    <EVENT>
      <ID>44</ID>
      <DESCRIPTION>Indicates that a Transact-SQL statement within a stored procedure has started.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SP:StmtCompleted-->
    <EVENT>
      <ID>45</ID>
      <DESCRIPTION>Indicates that a Transact-SQL statement within a stored procedure has completed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Object:Created-->
    <EVENT>
      <ID>46</ID>
      <DESCRIPTION>Indicates when an object has been created, such as for CREATE INDEX, CREATE TABLE, and CREATE DATABASE statements.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Object:Deleted-->
    <EVENT>
      <ID>47</ID>
      <DESCRIPTION>Indicates when an object has been deleted, such as in DROP INDEX and DROP TABLE statements.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Object:Opened-->
    <EVENT>
      <ID>48</ID>
      <DESCRIPTION>Indicates when an object has been accessed, such as for a SELECT, INSERT, or DELETE statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Object:Closed-->
    <EVENT>
      <ID>49</ID>
      <DESCRIPTION>Indicates when an object has been closed, such as at the end of a SELECT, INSERT, or DELETE statement.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--SQLTransaction-->
    <EVENT>
      <ID>50</ID>
      <DESCRIPTION>Tracks BEGIN TRANSACTION, COMMIT TRANSACTION, SAVE TRANSACTION, and ROLLBACK TRANSACTION statements.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Scan:Started-->
    <EVENT>
      <ID>51</ID>
      <DESCRIPTION>Indicates when a table or index scan has started.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Scan:Stopped-->
    <EVENT>
      <ID>52</ID>
      <DESCRIPTION>Indicates when a table or index scan has stopped.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorOpen-->
    <EVENT>
      <ID>53</ID>
      <DESCRIPTION>Indicates when a cursor has been opened on an SQL statement by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--TransactionLog-->
    <EVENT>
      <ID>54</ID>
      <DESCRIPTION>Tracks when transaction are written to the transaction log.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Hash Warning-->
    <EVENT>
      <ID>55</ID>
      <DESCRIPTION>Indicates that a hashing operation may have incurred a problem.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Auto Stats-->
    <EVENT>
      <ID>58</ID>
      <DESCRIPTION>Collects the events associated with the automatic creation and updating of statistics.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Deadlock Chain-->
    <EVENT>
      <ID>59</ID>
      <DESCRIPTION>Is produced for each of the events leading up to the deadlock.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Lock:Escalation-->
    <EVENT>
      <ID>60</ID>
      <DESCRIPTION>A finer-grained lock has been converted to a coarser-grained lock.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--OLEDB Errors-->
    <EVENT>
      <ID>61</ID>
      <DESCRIPTION>Indicates that an OLE DB error has occurred.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Execution Warnings-->
    <EVENT>
      <ID>67</ID>
      <DESCRIPTION>Indicates any warnings that occurred during the execution of a SQL Server statement or stored procedure.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Execution Plan-->
    <EVENT>
      <ID>68</ID>
      <DESCRIPTION>Displays the plan tree of the SQL statement being executed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Sort Warnings-->
    <EVENT>
      <ID>69</ID>
      <DESCRIPTION>Indicates sort operations that do not fit into memory. Does not include sort operations involving the creation of indexes, only sort operations within a query (such as an ORDER BY clause used in a SELECT statement).</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorPrepare-->
    <EVENT>
      <ID>70</ID>
      <DESCRIPTION>Indicates when a cursor on an SQL statement has been prepared for use by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Prepare SQL-->
    <EVENT>
      <ID>71</ID>
      <DESCRIPTION>Indicates when an SQL statement or statements have been prepared for use by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Exec Prepared SQL-->
    <EVENT>
      <ID>72</ID>
      <DESCRIPTION>Indicates when a prepared SQL statement or statements have been executed by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Unprepare SQL-->
    <EVENT>
      <ID>73</ID>
      <DESCRIPTION>Indicates when a prepared SQL statement or statements have been unprepared by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorExecute-->
    <EVENT>
      <ID>74</ID>
      <DESCRIPTION>Indicates when a prepared cursor on an SQL statement has been executed by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorRecompile-->
    <EVENT>
      <ID>75</ID>
      <DESCRIPTION>Indicates when a cursor on an SQL statement has been recompiled either intentionally or due to a schema change or other event.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorImplicitConversion-->
    <EVENT>
      <ID>76</ID>
      <DESCRIPTION>Indicates when a cursor on an SQL statement has been converted by SQL Server from one type to another.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorUnprepare-->
    <EVENT>
      <ID>77</ID>
      <DESCRIPTION>Indicates when a prepared cursor on an SQL statement has been unprepared by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--CursorClose-->
    <EVENT>
      <ID>78</ID>
      <DESCRIPTION>Indicates when a cursor on an SQL statement has been closed by ODBC, OLE DB or DB-Library.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Missing Column Statistics-->
    <EVENT>
      <ID>79</ID>
      <DESCRIPTION>Indicates that column statistics which would have been useful to the query optimizer are not present.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Missing Join Predicate-->
    <EVENT>
      <ID>80</ID>
      <DESCRIPTION>Indicates that a predicate joining two tables is not present.  This can potentially result in long-running queries or inaccurate results.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Server Memory Change-->
    <EVENT>
      <ID>81</ID>
      <DESCRIPTION>Indicates when SQL Server memory usage increases or decreases by 1 megabyte or 5% of the maximum server memory, whichever is greater.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:0-->
    <EVENT>
      <ID>82</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:1-->
    <EVENT>
      <ID>83</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:2-->
    <EVENT>
      <ID>84</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:3-->
    <EVENT>
      <ID>85</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:4-->
    <EVENT>
      <ID>86</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:5-->
    <EVENT>
      <ID>87</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:6-->
    <EVENT>
      <ID>88</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:7-->
    <EVENT>
      <ID>89</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:8-->
    <EVENT>
      <ID>90</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--UserConfigurable:9-->
    <EVENT>
      <ID>91</ID>
      <DESCRIPTION>Collects event data defined by the user.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Data File Auto Grow-->
    <EVENT>
      <ID>92</ID>
      <DESCRIPTION>Indicates that the data file grew automatically. This event does not get triggered if the data file is grown explicitly through alter database.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Log File Auto Grow-->
    <EVENT>
      <ID>93</ID>
      <DESCRIPTION>Indicates that the log file grows automatically. This event does not get triggered if the log file is grown explicitly through alter database.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Data File Auto Shrink-->
    <EVENT>
      <ID>94</ID>
      <DESCRIPTION>Indicates that the data file has been shrunk.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Log File Auto Shrink-->
    <EVENT>
      <ID>95</ID>
      <DESCRIPTION>Indicates that the log file has been shrunk.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Show Plan Text-->
    <EVENT>
      <ID>96</ID>
      <DESCRIPTION>Displays the query-plan tree of the SQL statement being executed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Show Plan All-->
    <EVENT>
      <ID>97</ID>
      <DESCRIPTION>Displays the query-plan with full compile-time details (including costing estimates and column lists) of the SQL statement being executed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Show Plan Statistics-->
    <EVENT>
      <ID>98</ID>
      <DESCRIPTION>Displays the query-plan with full run-time details (including actual number of rows passing through each operation) of the SQL statement, which was executed.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--RPC Output Parameter-->
    <EVENT>
      <ID>100</ID>
      <DESCRIPTION>Information about output parameters of previously executed remote procedure call.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Statement GDR Event-->
    <EVENT>
      <ID>102</ID>
      <DESCRIPTION>Records GRANT, DENY, REVOKE statement permission events.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Object GDR Event-->
    <EVENT>
      <ID>103</ID>
      <DESCRIPTION>Records GRANT, DENY, REVOKE object permission events.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Addlogin Event-->
    <EVENT>
      <ID>104</ID>
      <DESCRIPTION>Records add and drop actions on SQL Server logins for sp_addlogin and sp_droplogin.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Login GDR Event-->
    <EVENT>
      <ID>105</ID>
      <DESCRIPTION>Records grant, revoke, and deny actions on Windows account login rights for sp_grantlogin, sp_revokelogin, and sp_denylogin.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Login Change Property Event-->
    <EVENT>
      <ID>106</ID>
      <DESCRIPTION>Records modifications on login property, except passwords, for sp_defaultdb and sp_default language.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Login Change Password Event-->
    <EVENT>
      <ID>107</ID>
      <DESCRIPTION>Records SQL Server login password changes. Passwords are not recorded.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Add Login to Server Role Event-->
    <EVENT>
      <ID>108</ID>
      <DESCRIPTION>Records addition or removal of logins to a fixed server role for sp_addsrvrolemember and sp_dropsrvrolemember.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Add DB User Event-->
    <EVENT>
      <ID>109</ID>
      <DESCRIPTION>Records addition and removal of database users (Windows or SQL Server).</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Add Member to DB Role Event-->
    <EVENT>
      <ID>110</ID>
      <DESCRIPTION>Records addition and removal of members to a database role (fixed or user-defined) for sp_addrolemember, sp_droprolemember, and sp_changegroup.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Add Role Event-->
    <EVENT>
      <ID>111</ID>
      <DESCRIPTION>Records add or drop actions on database roles for sp_addrole and sp_droprole.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit App Role Change Password Event-->
    <EVENT>
      <ID>112</ID>
      <DESCRIPTION>Records changes on the password of an application.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Statement Permission Event-->
    <EVENT>
      <ID>113</ID>
      <DESCRIPTION>Records use of statement permissions.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Object Permission Event-->
    <EVENT>
      <ID>114</ID>
      <DESCRIPTION>Records use of object permissions, successfully or unsuccessfully.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Backup/Restore Event-->
    <EVENT>
      <ID>115</ID>
      <DESCRIPTION>Records BACKUP and RESTORE events.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit DBCC Event-->
    <EVENT>
      <ID>116</ID>
      <DESCRIPTION>Records DBCC commands issued.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Change Audit Event-->
    <EVENT>
      <ID>117</ID>
      <DESCRIPTION>Records AUDIT modifications.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
    <!--Audit Object Derived Permission Event-->
    <EVENT>
      <ID>118</ID>
      <DESCRIPTION>Records when a CREATE, ALTER, or DROP command is issued for the specified object.</DESCRIPTION>
      <BESTPRACTICE />
    </EVENT>
  </EVENTLIST>
  <COLUMNLIST>
    <!--TextData-->
    <COLUMN>
      <ID>1</ID>
      <DESCRIPTION>Text value dependent on the event class captured in the trace.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--BinaryData-->
    <COLUMN>
      <ID>2</ID>
      <DESCRIPTION>Binary value dependent on the event class captured in the trace.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--DatabaseID-->
    <COLUMN>
      <ID>3</ID>
      <DESCRIPTION>ID of the database specified by the USE database statement, or the default database if no USE database statement has been issued for a given connection.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--TransactionID-->
    <COLUMN>
      <ID>4</ID>
      <DESCRIPTION>System-assigned ID of the transaction.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--NTUserName-->
    <COLUMN>
      <ID>6</ID>
      <DESCRIPTION>Windows user name.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--NTDomainName-->
    <COLUMN>
      <ID>7</ID>
      <DESCRIPTION>Windows domain to which the user belongs.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--HostName-->
    <COLUMN>
      <ID>8</ID>
      <DESCRIPTION>Name of the computer on which the client is running. This data column is populated if the host name is provided by the client. To determine the host name, use the HOST_NAME function.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ClientProcessID-->
    <COLUMN>
      <ID>9</ID>
      <DESCRIPTION>The process ID of the application calling SQL Server.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ApplicationName-->
    <COLUMN>
      <ID>10</ID>
      <DESCRIPTION>Name of the client application that created the connection to SQL Server. This column is populated with the values passed by the application rather than the displayed name of the program.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--LoginName-->
    <COLUMN>
      <ID>11</ID>
      <DESCRIPTION>Name of the login of the user (either SQL Server security login or the Windows login credentials in the form of DOMAIN\Username).</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--SPID-->
    <COLUMN>
      <ID>12</ID>
      <DESCRIPTION>Server Process ID assigned by SQL Server to the process associated with the client.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Duration-->
    <COLUMN>
      <ID>13</ID>
      <DESCRIPTION>Amount of time (in milliseconds) taken by the event.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--StartTime-->
    <COLUMN>
      <ID>14</ID>
      <DESCRIPTION>Time at which the event started, when available.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--EndTime-->
    <COLUMN>
      <ID>15</ID>
      <DESCRIPTION>Time at which the event ended. This column is not populated for starting event classes, such as SQL:BatchStarting or SP:Starting.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Reads-->
    <COLUMN>
      <ID>16</ID>
      <DESCRIPTION>Number of logical disk reads performed by the server on behalf of the event.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Writes-->
    <COLUMN>
      <ID>17</ID>
      <DESCRIPTION>Number of physical disk writes performed by the server on behalf of the event.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--CPU-->
    <COLUMN>
      <ID>18</ID>
      <DESCRIPTION>Amount of CPU time (in milliseconds) used by the event.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Permissions-->
    <COLUMN>
      <ID>19</ID>
      <DESCRIPTION>Integer value representing the type of permissions checked.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Severity-->
    <COLUMN>
      <ID>20</ID>
      <DESCRIPTION>Severity level of an exception.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--EventSubClass-->
    <COLUMN>
      <ID>21</ID>
      <DESCRIPTION>Type of event subclass. This data column is not populated for all event classes.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ObjectID-->
    <COLUMN>
      <ID>22</ID>
      <DESCRIPTION>System-assigned ID of the object.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Success-->
    <COLUMN>
      <ID>23</ID>
      <DESCRIPTION>1 = success. 0 = failure (for example, a 1 means success of a permissions check and a 0 means a failure of that check).</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--IndexID-->
    <COLUMN>
      <ID>24</ID>
      <DESCRIPTION>ID for the index on the object affected by the event. To determine the index ID for an object, use the indid column of the sysindexes system table.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--IntegerData-->
    <COLUMN>
      <ID>25</ID>
      <DESCRIPTION>Integer value dependent on the event class captured in the trace.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ServerName-->
    <COLUMN>
      <ID>26</ID>
      <DESCRIPTION>Name of the SQL Server traced.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--EventClass-->
    <COLUMN>
      <ID>27</ID>
      <DESCRIPTION>Event class name.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ObjectType-->
    <COLUMN>
      <ID>28</ID>
      <DESCRIPTION>Value representing the type of the object involved in the event. This value corresponds to the type column in sysobjects.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--NestLevel-->
    <COLUMN>
      <ID>29</ID>
      <DESCRIPTION>Integer representing the data returned by @@NESTLEVEL.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--State-->
    <COLUMN>
      <ID>30</ID>
      <DESCRIPTION>Equivalent to an error state code.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Error-->
    <COLUMN>
      <ID>31</ID>
      <DESCRIPTION>Error number of a given event. Often this is the error number stored in sysmessages.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Mode-->
    <COLUMN>
      <ID>32</ID>
      <DESCRIPTION>Integer used by various events to describe a state the event has received or is requesting.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--Handle-->
    <COLUMN>
      <ID>33</ID>
      <DESCRIPTION>Integer used by ODBC, OLE DB, or DB-Library to coordinate execution with the server.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ObjectName-->
    <COLUMN>
      <ID>34</ID>
      <DESCRIPTION>The name of the object being referenced.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--DatabaseName-->
    <COLUMN>
      <ID>35</ID>
      <DESCRIPTION>Name of the database in which the statement of the user is running.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--FileName-->
    <COLUMN>
      <ID>36</ID>
      <DESCRIPTION>The logical name of the file being modified.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--OwnerName-->
    <COLUMN>
      <ID>37</ID>
      <DESCRIPTION>Database user name of the object owner.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--RoleName-->
    <COLUMN>
      <ID>38</ID>
      <DESCRIPTION>Name of an application role being enabled.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--TargetUserName-->
    <COLUMN>
      <ID>39</ID>
      <DESCRIPTION>For actions which target a database user (for instance, granting permission to a user), the name of that user.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--DBUserName-->
    <COLUMN>
      <ID>40</ID>
      <DESCRIPTION>SQL Server user name of the client.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--LoginSid-->
    <COLUMN>
      <ID>41</ID>
      <DESCRIPTION>Security identification number (SID) of the logged-in user. You can find this information in the syslogins table of the master database. Each SID is unique for each login in the server.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--TargetLoginName-->
    <COLUMN>
      <ID>42</ID>
      <DESCRIPTION>For actions which target a login (for instance, adding a new login), the name of the targeted login.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--TargetLoginSid-->
    <COLUMN>
      <ID>43</ID>
      <DESCRIPTION>For actions which target a login (for instance, adding a new login), the security identification number (SID) of the targeted login.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
    <!--ColumnPermissions-->
    <COLUMN>
      <ID>44</ID>
      <DESCRIPTION>Indicator of whether a column permission was set. Parse the statement text to determine exactly which permissions were applied to which columns.</DESCRIPTION>
      <BESTPRACTICE />
    </COLUMN>
  </COLUMNLIST>
</EventColumnDescriptions>