SQL Auditing Functionality Can someone tell me what the cause of this alert is that's captured by our SQL Audit trace we have setup using the built-in auditing functionality? This alert is generated from time to time in the audit log and the audit log has not been disabled or the server has not restarted.

&lt;action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"&gt;
  &lt;session&gt;
    &lt;![CDATA[EDW Audit$A]]&gt;
  &lt;/session&gt;
  &lt;action&gt;event enabled&lt;/action&gt;
  &lt;startup_type&gt;automatic&lt;/startup_type&gt;
  &lt;object&gt;&lt;![CDATA[audit_event]]&gt;&lt;/object&gt;
&lt;/action_info&gt;
You need to set action disabled which is given in values.

&lt;action_info xmlns="http://schemas.microsoft.com/sqlserver/2008/sqlaudit_data"&gt;&lt;session&gt;&lt;![CDATA[TestServerAudit$A]]&gt;&lt;/session&gt;&lt;action&gt;event disabled&lt;/action&gt;&lt;object&gt;&lt;![CDATA[audit_event]]&gt;&lt;/object&gt;&lt;/action_info&gt;


For more information, see SQL Server Audit Log