RING_BUFFER_SECURITY_ERROR - extended events
In the extended events, this error is happens constantly. I've searched the web with no luck in determining the cause of these RING_BUFFER_SECURITY_ERROR errors. It's in versions 2008 R2, 2012 and 2014. Any help in determining the cause of this would be appreciated.
other details" Error code: 0x139F NLShimImpersonate ImpersonateSecurityContext
you can use this query to list the errors out:
SELECT CONVERT (varchar(30), GETDATE(), 121) as runtime,
dateadd (ms, (a.[Record Time] - sys.ms_ticks), GETDATE()) as [Notification_Time],
a.* , sys.ms_ticks AS [Current Time]
x.value('(//Record/Error/ErrorCode)', 'varchar(30)') AS [ErrorCode],
x.value('(//Record/Error/CallingAPIName)', 'varchar(255)') AS [CallingAPIName],
x.value('(//Record/Error/APIName)', 'varchar(255)') AS [APIName],
x.value('(//Record/Error/SPID)', 'int') AS [SPID],
x.value('(//Record/@id)', 'bigint') AS [Record Id],
x.value('(//Record/@type)', 'varchar(30)') AS [Type],
x.value('(//Record/@time)', 'bigint') AS [Record Time]
FROM (SELECT CAST (record as xml) FROM sys.dm_os_ring_buffers
CROSS JOIN sys.dm_os_sys_info sys
ORDER BY a.[Record Time] DESC
Upvotes: 7<=-=Jun 20 2016 1:47AM=-=>
I can see similar issue on SQL Server 2014 – (12.0.2000.8) and I would be more than happy to know what’s the reason of ring buffer flooding by this event.<=-=Sep 22 2017 2:47AM=-=>
I’m seeing this on SQL Server 2016 SP1 CU4
János Berke commented
I have the same issue with SQL Server 2016 as well. We see only when SQL login was used. It seems the event triggered in some unexpected cases as well. we are opening an SR due to the flooding and the overhead of the writing of 2K+events in the XE file.
Here is a call stack of the login and the error:
a complete repro and xe processing script is available in case of request.