I recently ran through a health audit for a customer, and in reviewing their system_health output I was reminded of the unnecessary security_error_ring_buffer_recorded event. That’s right: you don’t need it in your system_health session.
Jonathan and I have talked about this numerous times, but neither of us have ever written about it. In the case of our Remote DBA customers, we remove security_error_ring_buffer_recorded event from the system_health event session on all instances we access. I’m typically not someone that recommends altering what ships and runs by default by Microsoft, but in this case, I’m all for it. Aaron Bertrand recently blogged